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SUPREME COURT 
HEARS BILSKI 
ARGUMENTS 

BY ALEX HANDY 

All that's left to do now is wait. 
The U.S. Supreme Court in 
November heard one hour of 
arguments regarding the patent 
case known as Bilski v. Kappos. 
The litigation focuses on the 
patenting of a process, and legal 
experts have predicted that the 
case could have far-reaching 
implications for software patents. 
Those spectators likely includ- 
ed people from firms that filed 
"Friend of the Court" briefs in the 
case, such as Red Hat and the 
Software Freedom Law Center. 
At issue is the failure of the U.S. 
Patent and Trademark Office to 
continued on page 27 ► 



W3C meets with developers 
to discuss future of HTML 5 



BY ALEX HANDY 

The W3C has a lot on its plate. 
The standards body that gov- 
erns the development of CSS 
and HTML met in November 
with developers in Silicon Val- 
ley to discuss the future of the 
Web. Among the topics of dis- 
cussion will be the HTML 5 
specification, a future bereft of 
unused IPv4 addresses, and 
mobile widget application 
development. 

Chief among the W3C's 
duties is its work on HTML 5. 
Philippe Le Hegaret, a member 
of multiple standards groups at 
the W3C, including the group 



The Internet Explorer team has been 
slow to announce its intentions 
und some of 
■TML 5 chdng^___A-- 



working on HTML 5, said that 
the markup language-cum-pro- 
gramming language should be 
ready by the end of 2010. By that 
time, he said he expects the 
major browsers to accommodate 
the specification. 

There are still questions 
about Microsoft's Internet Ex- 



plorer, however. Le Hegaret 
said that all the major browsers 
are on board with the HTML 5 
process, and that Microsoft was 
registered to send five develop- 
ers to the meetings. But at the 
same time, the Internet Explor- 
er team has been slow to 
announce its intentions around 



some of the HTML 5 changes. 

Specifically, Microsoft has 
not yet chosen a codec for use 
with the new video handling 
capabilities in HTML 5. The 
company has also dragged its 
feet in implementing the new 
scalable vector graphics capabil- 
ities introduced in HTML 5. 

Complicating matters is the 
lack of cohesion on video codecs 
among the other browser makers, 
said Le Hegaret. "One of the goals 
of HTML 5 is to make sure all the 
browsers implement it correctly. 
Another big problem we are fac- 
ing is with the HTML video ele- 
continued on page 30 ► 



Is Enterprise 2.0 a crock? 

Changes in technology make buzzword projects a reality 



BY ALEX HANDY 

The Web 2.0 revolution has 
gone out into the technology 
wild. Today, newfangled ideas 
are frequently labeled "2.0," and 
as such, the Enterprise 2.0 con- 
ference in San Francisco hosted 
a keynote panel that explored 
whether or not this buzz-num- 
ber is really warranted when it is 
used to refer to social networks, 
instant messaging and dissolved 
hierarchies. 

David Berlind, chief content 
officer of TechWeb, the media 



company hosting the conference, 
chaired a panel of speakers 
pulled from enterprises that have 
attempted to embrace Enterprise 
2.0 technologies, such as social 
networking, Share Point Server 
and Twitter-like microblogging. 
He asked this panel, point blank: 
"Is Enterprise 2.0 a crock?" 

Claire Flanagan, senior man- 
ager of enterprise social collabo- 
ration at CSC, said that Enter- 
prise 2.0 may be just a buzzword 
for the types of changes enter- 
prises have long dreamed about. 



What has changed is that the 
technology now makes such pie- 
in-the-sky projects possible. 

"I came from knowledge 
management," said Flanagan, 
"and it was a system you had to 
go to and store information in. 
These new technologies are let- 
ting workers store knowledge 
from within their work stream. 
We're capturing the knowledge 
as they're engaging in their busi- 
ness process." 

Jamie Pappas, manager of 
continued on page 30 ► 



Apache's Incubator takes in 
a new project Subversion 




CollabNet's Bill Portelli believes 
Subversion development will speed 
up in a wide community. 



BY DAVID RUBINSTEIN 

Subversion has been used in tight 
stacks with Apache Software 
Foundation projects such as 
Maven and Tomcat. Now, the 
open-source software configura- 
tion management system is part of 
Apache with the announcement 
that the project has been accepted 
into the Apache Incubator, where 
projects first go on their way to 
top-level project status. (Ten 
years of Apache, page 12) 
There is a great amount of syn- 
continued on page 30 ► 
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Smarter technology for a Smarter Planet: 

Building the extraordinary 
everyday things. 



By next year, the average car will require over 100 million lines 
of software code, and a commercial airplane, over 1 billion. 
It's approaching the point where a car or a plane isn't simply a car 
or a plane anymore. What makes them truly unique is the underlying 
software— the invisible thread— that infuses them with intelligence. 
It's no wonder then that fully 66% of the products developed in the 
past year included some kind of embedded software. 

Today, every company needs to consider software a core strategic 
business asset. Unfortunately, 41 % of software projects fail to 
deliver the expected business value and ROI. Only IBM has the 
experience, the resources and the solutions to build more effective 
software design and delivery processes for the world's leading 
businesses. So they can foster collaboration, automate workflows, 
report progress against goals and improve on results. 

A smarter business needs smarter software, systems and services. 
Let's build a smarter planet, ibm.com/delivery 
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Revolutionary data presenters with 5 built-in views, one-click 
view switching, extensible architecture, sleek UX, and more, 
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.NET RIA Services wrth full Silverlight 3 support, 

1 I nd u stry 's faste st Grid po we red w ith i nno vati ve Vi rtua I S c ro 1 1 ™, 
comprehensive editing, Vista-sty !e filter, data drill, and more. 




pi 








The Sua TiKkfiftfieniFPuy 








h^^ 1 ■ ^ ilril #i^^M i^ j.i^, 


» >~«.i^- '»< 


m i I'liim i i ^^^k 


Jlrtf -<W-^' ' a 1 








->«'■' *-» — *■» 




iHM 4MI — -« Mn |H- MlH- 


1 nhMi fc*. 




"* — •«— "- J; -a** M, 


WH 


*"* **""" J ^J— Hi 


kpuka. :>hw.^h Hl^ f-f" 


W JEU^lNht 1 














■ h*— +.-^*«. ,j bj j taMimi 















1* 


- 


# 




SI 






M 
•-3L 


Z 





Webllf Studio 2009 Premier" provides the most advanced and comprehensive set of presentation layer components available today! 

Download the free trial now: www.intersoftpt.com/WebUIStudio 
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Submission guidelines for CodePlex 

Microsoft's open-source community is helping companies donate code to it 



BY ALEX HANDY 

When Microsoft announced its 
newly formed non-profit open- 
source community, CodePlex, 
in September, the goal was to 
provide an entity to help guide 
corporate open-source contri- 
butions. The exact mechanism 
of this help was undefined, 
but in November, CodePlex 
released its first set of submis- 
sion guidelines. 

These guidelines still do 
not address the underlying 
goals of CodePlex, but they 
are a start, said Sam Ramji, the 
interim director of CodePlex. 
Ramji left Microsoft in Octo- 
ber, where he headed up the 
company's efforts to engage 



and contribute to open-source 
projects. He said the initial 
guidelines for code submis- 
sions are there to help guide 
Microsoft partners and other 
companies that have yet to 
engage with the open-source 
community. 

"We believe that the soft- 
ware industry will become bet- 
ter if software companies on a 
larger scale can consistently and 
sustainably contribute to open- 
source projects," said Ramji. 
"That's not a big issue for the 
biggest projects, such as 
Eclipse, Apache and Mozilla, 
but now we've just named the 
top 100 [open-source] projects. 

"There are 350,000 open- 



source projects. Of the 75,000 
ISVs, the percentage of them 
making contributions is 
incredibly low. We think the 
reasons for that the mecha- 
nism of how you contribute as 
a typical commercial entity is 
not well understood," he 
added. 

Thus, CodePlex will offer 
guidelines and samples from 
existing projects to show com- 
panies how best to contribute 
to open-source projects. 

ARE PATENTS A ROADBLOCK? 

Bernard Golden, CEO of Navi- 
ca, an open-source systems 
integrator, and author of "Suc- 
ceeding with Open Source," 



said that the lack of such an 
entity hasn't slowed down 
open-source contributions from 
corporate entities. He said that 
the interesting aspect of Code- 
Plex is the non-profit's ability to 
hold patent and copyright pro- 
tections for Microsoft's contri- 
butions, as well as for contribu- 
tions from other companies. 

When asked about Golden's 
observation, Ramji said that 
intellectual-property protection 
is a goal for CodePlex, and that 
the initial guidelines explain 
some of the methods needed to 
provide patent and copyright 
protections to downstream 
users. 

But Golden is still skeptical 



of the CodePlex claim that 
companies are unsure of how to 
contribute back to open source. 

"Looking at actual practice, 
companies are embracing open 
source and using it a lot. It 
doesn't seem like the threat of 
patents or trademark issues are 
hanging over them to the point 
where they'd say, 'Let's go be 
part of this CodePlex thing,'" 
said Golden. 

"Most open-source projects 
come from an individual or a 
small group of people. An indi- 
vidual or small group isn't that 
attracted to say, T want to go 
work with Microsoft. I've got to 
be protected against patent 
infringement.' " I 



Microsoft adapts SDL to agile development 

Testing during development emphasized in changes 



BY DAVID WORTHINGTON 

Microsoft has announced that 
it is evolving its Security Devel- 
opment Lifecycle (SDL) 
process to accommodate agile 
development, but experts 
stress that using it is easier said 
than done. 

The SDL is a mandatory 
process used internally at 
Microsoft during the develop- 
ment of its products, and 
Microsoft began to share SDL 
documentation and tooling 
with customers last year. 

"The classic SDL does not 
apply to agile development. 
There is no distinct [security] 
phase inside of agile, and the 
shorter release cycles mess 
with applying the SDL," 
explained David Ladd, princi- 
pal security program manager 
for Microsoft's SDL team. 

Faced with the challenge of 
preserving the rigor of the 
SDL process, Microsoft has 



reorganized the SDL process 
for agile by creating tasks for 
each sprint, as well as occa- 
sional requirements (such as 
developing a security incident 
response plan) that could be 
rolled off every four to five 
sprints, said Ladd. "Removing 
[SDL] requirements to fit agile 
was not going to happen," he 
added. 

"Sprint" is a term used in 
Scrum development to describe 
the period of time that it takes a 
team to increment usable soft- 
ware. 

Forrester senior analyst 
David West described the 
SDL for Agile Development 
as a hybrid approach that 
grafts new activities onto tradi- 
tional agile processes. 

Hybrid approaches based on 
agile have become necessary as 
agile practices are being 
applied to large, mission-critical 
projects, West explained. "In 



these approaches, we see agile 
delivery working as it always 
works, but then delivering into 
some more sequential release 
process that includes security, 
performance and other more 
traditional activities." 

Realizing that agile 
processes have been drafted 
with flexibility in mind, 
Microsoft designed the SDL 
for Agile Development to be 
easy to understand and as cus- 
tomizable as possible, Ladd 
said. It was formed out of real- 
world experiences from Web 
application development 

teams and online services 
teams at Microsoft that partic- 
ipated in a beta. 

NOT A PERFECT PROCESS 

However, analysts questioned 
how easily agile organizations 
could adopt the SDL process, 
and they said that security 
work would also have to take 



place outside of the agile 
development process. 

"I like the idea of security 
requirements being treated 
like other requirements and 
thus part of the backlog," said 
West. "But I still would expect 
to see some security testing 
happening outside of the agile 
development process." 

There is also a matter of fit- 
ting the SDL into real-world 
agile development processes, 
said testing expert Rex Black, 
president of Rex Black Con- 
sulting Services. Activities 
such as streamlining risk docu- 
mentation and the risk analysis 
process of the SDL could 
prove challenging to diffuse 
into the "agile world," he 
explained. 

Black claimed that the agile 
development culture is resistant 
to documentation, and most 
organizations have a difficult 
time implementing agile "out of 



the box" according to a single 
consultant's "highly prescriptive 
processes and approaches." 
Microsoft's hybrid approach 
introduces a "new realm of 
potentially disruptive process 
change," he added. 

Another issue to resolve is 
who does the work, said West. 
He said that security testing 
must be easy to do once it is in 
the hands of agile develop- 
ment teams. That complexity 
is a "driver for splitting some 
work into agile development 
and other work to be treated 
in a more traditional way." 
Specialists drive traditional 
development and testing, and 
also mentor the teams doing 
development, he added. 

"Ultimately, risk-based test- 
ing (whether in-the-large 
across all quality-risk cate- 
gories, or in-the-small for pri- 
vacy and security only) is com- 
pletely consistent with the 
core principles of agile," Black 
said. But he expects the chal- 
lenges of adopting SDL prac- 
tices for agile development 
will prove a significant hurdle 
to adoption. I 
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Microsoft reorganized SDL activities to be more flexible for agile development. Security has been built into the process, and developers can modify it as needed. 
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, COMPANIES , 



IBM has created the IBM Cloud Academy, a forum for educators 
and IT personnel from academia to pursue cloud-computing initia- 
tives, develop skills and share best practices. Seventeen educa- 
tional institutions worldwide will be the first participants in the 
Cloud Academy, among them George Mason University, Beijing Uni- 
versity of Technology and Carnegie Mellon University in Qatar. 



_L 



NEW PRODUCTS 



Yahoo has created an open-source version of its Traffic Server 
application server for builders of cloud services. Traffic Server 
enables the session management and authentication of cloud com- 
puting stacks, and Yahoo executives said making it open source 
enables faster responses to reguests for stored Web objects, such as 
files, news articles or images. 



UPDATES 



Zend Technologies has made its Zend Server Web application 

server available through Oracle's Unbreakable Linux Network. Zend 
executives said this helps speed installation of PHP-based Web 
applications. Zend Server already had integration capabilities with 
the Oracle Database . . . Bredex has released GUIdancer 3.2, an 
automated functional tester, increasing the tests that can be written 
for components such as tabbed panes, tables and context menus. 
GUIdancer executives said these additions boost the tester's library 
to over 100 test actions . . . VMLogix, a virtual machine manage- 
ment company, will integrate with Red Hat Enterprise Virtualization. 
According to company executives, this will allow users to consolidate 
labs leveraging Red Hat Enterprise Linux 5 and Red Hat Enter- 
prise Virtualization, and allows for the use of VMLogix LabManag- 
er to automate lab IT infrastructure . . . Intersoft has released WebUI 
Studio R1 SP1, bringing new integrations with ASP.NET and Sil- 
verlight, along with integration with SharePoint Server 2010. Also 
new in the release are automatic key value assignment for GUID 
data types, and the ability to add new rows when batch updates are 
enabled in WebGrid . . . CollabNet has released CollabNet Desktop 
Visual Studio Edition 2.0. The release focuses on offering 
Microsoft Visual Studio developers the features of the TeamForge 
ALM platform and the Subversion software configuration manager. 
Visual Studio users can perform Subversion tasks, such as viewing 
the status of source code or committing changes, without leaving 
Visual Studio through a component called AnkhSVN, the company 
said . . . XML database software provider Altova has added the abil- 
ity to create XBRL taxonomies and generate XBRL documentation 
to a new version of its XMLSpy XML editor. XMLSpy 2010 has a 
redesigned scripting environment and forms editor for accessing 
and interacting with the XMLSpy API, and there is also new integra- 
tion with the WSDL (Web Services Description Language) editor 
. . . Application monitoring company AVIcode has integrated its 
monitoring and management software with Unisys Portugal's sys- 
tems integration consulting services. AVIcode executives said inte- 
gration between both companies' products allows Unisys customers 
to diagnose problems like performance degradations, code failures, 
and security problems. 



PEOPLE 



The Agile Alliance has added six new board members and named 
three board members as officers. Laurent Bossavit, Esther Derby, 
Cesar Idrovo, Henrik Kniberg, Diana Larsen, and J.B. Rainsberger 

will help try to grow the alliance. Bossavit, Idrovo and Rainsberger 
are software development consultants, while Derby, Kniberg and 
Larsen are agile coaches that work with teams to adopt agile and 
lean practices. Meanwhile, Larsen, along with existing members 
Todd Little and Tamara Sulaiman, are now executive officers with 
the alliance. The Agile Alliance is a non-profit organization focused 
on advancing agile software development principles and practices. 



Telerik embraces Silverlight 
with updated control suite 



BY DAVID WORTHINGTON 

A new edition of Telerik s Rad- 
Controls UI component suite 
features a native Silverlight 
report viewer, automates Sil- 
verlight UI testing, and has an 
object-relational mapping tool 
for Microsoft's SQL Azure cloud 
service platform. The suite 
became available in November. 

RadControls Q3 2009 has 
updated controls throughout 
the suite, but Telerik placed 
most of its emphasis on Sil- 
verlight and business scenar- 
ios, said Todd Anglin, the com- 
pany's chief evangelist. 

A Silverlight report viewer 
renders and displays docu- 
ments in XAML, Anglin said. It 
also provides a print capability, 
which Silverlight 3.0 lacks. "If 
Microsoft adds platform-level 
generic printing support to Sil- 
verlight, it's not a breaking 
change," he said. 

An automated UI testing 
tool for Silverlight allows devel- 
opers to generate tests that are 
saved as standard Microsoft 
unit testing projects in Visual 
Studio, Anglin said. The tests 
can be made a build check-in 
requirement for Visual Studio 
Team System 2010, he added. 

Visual Studio Extensions for 
RadControls for Silverlight now 
assist developers in automating 
the creation, upgrading and 
configuration of Telerik Sil- 
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Telerik offers an object-relational mapping tool for Microsoft's SQL Azure. 



verlight projects, according to 
the company. 

Telerik has also begun to roll 
out controls for Microsoft's 
ASP.NET model-view-con- 
troller (MVC) framework in the 
form of a grid component. 

"The framework makes it 
difficult to do a good reusable 
grid," Anglin said. The grid is 
built on top of Telerik's open- 
source MVC extensions. Those 
extensions, now in beta, are 
designed to make it easier for 
developers to work with UI 
modules that are based on the 
j Query library. 

Further, the release targets 
Microsoft's SQL Azure with an 
object-relational mapping tool 
called OpenAccess, which 



enables developers to map a 
cloud database to .NET applica- 
tion classes, or to write classes 
and then have OpenAccess cre- 
ate a database in SQL Azure, 
Anglin said. 

Other changes in RadCon- 
trols Q3 2009 include addi- 
tional ASP.NET controls and 
better-performing Windows 
Forms controls, he said. 
Telerik has also released a tool 
to make it easier for customers 
to update controls between its 
release cycles. 

Pricing for the full RadCon- 
trols Q3 2009 suite is US$1,299 
per developer seat. The license 
grants 24-hour support, access 
to C# source code and free 
updates for one year. I 



Mono creates Visual Studio add-on 



BY DAVID WORTHINGTON 

A new Visual Studio add-on 
from Novell's Mono project will 
help developers port .NET 
applications to Linux and Mac 

osx. 

Mono Tools for Visual Stu- 
dio became available in 
November. It enables develop- 
ers to deploy and test applica- 
tions within Visual Studio and 
isolate incompatibilities bet- 
ween Mono and .NET, and it 
can package applications for 
openSUSE and SUSE Linux. 

"It has been a pain point for 
[.NET] developers wanting to 
do cross-platform develop- 
ment," said Mono product 
manager Joseph Hill. Program 
managers will also have a 
clearer idea of what additional 
effort will be required to tar- 



he 
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get other platforms 
added. 

Mono is a Linux- 
based implementation of 
the Common Language 
Infrastructure, an open 
specification developed 
by Microsoft and pub- 
lished under Ecma-335. 

Another one of the 
team's goals is to target 
Linux appliance build- 
ing, Hill added. "Win- 
dows doesn't do appliances 
really well." 

The Mono team will be 
adding integration with addi- 
tional Linux distributions in the 
future, said project founder 
Miguel de Icaza. 

Mono Tools for Visual Stu- 
dio works with Visual Studio 
2008. The team is working 
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Mono Tools for Visual Studio is capable of 
remote debugging. 



toward having a beta release for 
Visual Studio 2010 around Jan- 
uary, Hill said. 

It is available under an indi- 
vidual license for US$99, an 
enterprise (one developer per 
organization) license for $245, 
and a five-developer pack with 
a commercial license to redis- 
tribute Mono for $2,499. I 
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Microsoft acquires Teamprise for Java foothold 

Technology addition turns Visual Studio TFS into a viable enterprise ALM solution 



BY DAVID WORTHINGTON 

With its November acquisition 
of SourceGear's Teamprise 
solution, Microsoft has obtained 
technology to allow Visual Stu- 
dio Team System to be used 
across platforms as a unified 
application life-cycle manage- 
ment solution for developers. 

Teamprise makes Visual 
Studio Team Foundation Serv- 
er (TFS), Visual Studio's data 
storage and collaboration back 
end, accessible from the 
Eclipse IDE on Linux, Mac 
OS X and Unix. 

Why would Microsoft sup- 
port Eclipse? "It's all about 
money," said Jeffrey Ham- 
mond, a principal analyst for 
Forrester Research. "They 
stand to make a decent amount 
of money by providing a single 
ALM solution that can work in 
large organizations that do 
both Java and .NET develop- 
ment." 

Hammond explained that 
Visual Studio Team System 
was disqualified for purchase 



as an ALM solution by 
many organizations for 



failing to support Eclipse 
out of the box. "This fixes 
that problem," he said. 

The Teamprise solu- 
tion consists of Eclipse 
plug-ins, a standalone 
module for accessing 
TFS, and a command-line 
utility. It will become 
available around March 
22 as a standalone prod- 
uct that is backward com- 
patible with Visual Studio 
2005 and 2008, and will 
also be included in the 
Ultimate edition of Visual 
Studio 2010. 

TFS is the backbone of 
Microsoft's ALM solution. 
Visual Studio 2010 adds 
new artifact collection, 
project tracking, reporting, 
and source control capabilities 
to TFS, which Microsoft says 
will help developers work 
more efficiently. 

With Teamprise and TFS, 
developers can collaborate and 
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Teamprise allows Linux, Mac and Unix developers to use Visual Studio Team System. 



have work items and require- 
ment definitions kept within a 
single repository, said Doug 
Seven, senior product manager 
for Visual Studio. He added 
that TFS also gives organiza- 
tions more visibility into pro- 



jects. "We are enabling the 
TFS infrastructure to be used 
by developers as they swivel 
between Eclipse and Visual 
Studio." 

Microsoft will continue to 
update Teamprise's technology 



il for future releases of 
TFS, and it will maintain 
its cross-platform sup- 
port, Seven said. 

"We have built a bridge 
to Java developers," said 
Dave Mendlen, senior 
director of developer mar- 
keting at Microsoft. "Mi- 
crosoft recognizes that 
there are heterogeneous 
development shops. TFS 
will help deliver greater 
business results regardless 
of what tool or platform 
people use." 

When asked why 
Microsoft has not yet 
added Java support to 
Visual Studio, Seven said 
that its Visual Studio part- 
ners' tools address that 
need. 
"We have looked at Java and 
have not competed in that 
realm," he said. "What cus- 
tomers demand is what we are 
going to look at, and we will 
look at that demand again in 
the future." I 



As the economy starts to rise, 

Will dirty data hold you down? 



Why data quality management matters: 



I 



1 When 1 percent of transactions 
contain incorrect data, the cost of all 
transactions doubles. 

2 Coping with dirty data costs enterprises 
millions each year. 

3 Even if you start with pristine data, 
the customer and partner data you 
use will quickly make it dirty. 



iWay Software's unique real-time 
data quality solution prevents bad 
data from ever getting into your 
systems. With support for over 300 
applications, formats, and systems, 
we ensure you have quality data 
everywhere: inside or outside 
the firewall, in every application, 
database, and message. 



Get started by calling (866) 297-4929 
or visiting us on the Web at 
iwaysoftware.com/go/sdtimes. 




3 LA 



4M 



Software 



iWay Software, an Information Builders company. 



www.seapine.com/devscm 

Satisfy your quality obsession. 



, / / 



/ 



/ 4>// / 



t-*Afs 



infinite 
possibilities 






© 2009 Seapine Software, Inc. All rights reserved. 



Get More Change Management 
with Seapine Integrated SCCM 

TestTrack Pro + Surround SCM = infinite SCCM possibilities. Seapine's integrated software change and 
configuration management (SCCM) tools do much more than competing tools, and at a much lower price 
point. Start with TestTrack Pro for change management and add Surround SCM for configuration management- 
two award-winning tools that together give you the best integrated SCCM solution on the market. 

• Link issues, change requests, and other work items with source code changes. 

• Manage simple or complex change processes with flexible branching and labeling. 

• Coordinate distributed development with RSS feeds, email conversation tracking, caching proxy 
servers, change notifications, 3-way diff/merge, and other collaboration features. 

• Enforce and automate processes with incredibly flexible work item and file-level workflows. 

Built on industry-standard RDBMSs, Seapine's SCCM tools are more scalable, give you more workflow options, 
and provide more security and traceability than competing solutions. 

Get more, do more with Seapine tools. Visit www.seapine.com/devscm. 

|jr Seapine Software 
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Google opens internal JavaScript tools 



Closure software slims down code r provides debugging 

BY ALEX handy sure tools are used by Google a library, a compiler, templates ager at Google, said the Closure 

Google released its internal employees to build the compa- and a debugging assistant tools have developed over the 

JavaScript tools as an open- ny's numerous AJAX-based named Closure Inspector. past few years during employee 

source project. These four Clo- applications. Closure consists of Amit Agarwal, product man- "20% time." Google employees 




are encouraged to work on their 
own projects of interest for 20% 
of their working hours. While 
such projects are typically more 
related to individual hobbies, 
the Closure tools evolved, said 
Agarwal, from Google develop- 
ers' desires to find solutions to 
their common Web application 
problems. 

One of those problems was 
saving bandwidth. With mil- 
lions of users accessing Google 
sites daily, a savings of a few 
kilobytes per JavaScript appli- 
cation could mean a savings of 
terabytes per month. As such, 
the Closure Compiler is built to 
shrink JavaScript code. 

Agarwal said that Closure 
Compiler "takes in your raw 
JavaScript code and compiles 
that into compact high-perfor- 
mance JavaScript code. Imag- 
ine you have a really rich appli- 
cation, and it is 300KB. If you 
take that raw JavaScript and 
pass it through Closure Com- 
piler, it tries to compress to 
code. 300KB could turn out to 
be 40KB. It depends a lot on 
the initial JavaScript, but we are 
seeing significant improve- 
ments here." 

The Closure Compiler has a 
number of tricks to save space. 
One of them is to truncate the 
names of variables, turning the 
descriptive names developers 
use during creation into single 
letters. "A lot of developers 
tend to use very descriptive 
code to make it easier to debug, 
whereas we don't need to pass 
that descriptive code to the 
client," said Agarwal. 

Because changing variable 
names can make things confus- 
ing when it's time to debug, the 
Closure Inspector can translate 
variable names back to their 
original form, giving developers 
back the information they orig- 
inally included. 

The Closure Library, mean- 
while, consists of commonly 
used JavaScript actions, and it 
is the standard JavaScript 
library at Google. "Library is a 
bunch of different functions, 
such as utilities for DOM, ani- 
mation, drag-and-drop, unit 
testing, rich text editing, and 
any of the stuff you see in most 
of Google's public applica- 
tions," said Agarwal. 

Closure Tools are available 
on Google Code. Since the pro- 
ject is open source, Agarwal 
said there have already been 
community contributions, 

despite the project only being 
open to the public since the 
beginning of November. I 
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Klocwork offers Insight into quality of code 



BY JEFF FEINMAN 

Klocwork is spreading out 
beyond the static analysis game 
and rolling out new software to 
help ensure the creation of 
strong code. 

Klocwork Insight Pro, 
released in November, consists 
of three main pieces of software 
around continuous static analy- 
sis, code review and automated 
code refactoring. Klocwork 
Insight Pro's continuous static 
analyzer detects defects and vul- 
nerabilities as code is being writ- 
ten. Gwyn Fisher, Klocworks 
CTO, said the new analysis capa- 
bilities focus on developers 
working in "tremendously com- 
pressed" development cycles. 

"We've focused previously 
on moving further upstream, 
getting into a developer's IDE 
and giving them the capability 
to run analysis pre-check-in," 
Fisher said. "That's all good 
stuff, but there's still that last 
mile of an IDE's editor." 

As a result, Klocwork Insight 
Pro brings what the company 
calls a no-click usability model 
that automatically analyzes the 
editing part of a developer's 
IDE. Fisher said changes to 
development projects, even in 
opening or saving a file, are 
automatically analyzed. 

Klocwork has also created a 
collaborative code reviewer 
that integrates with configura- 
tion management environments 
and Klocwork's static analyzer. 
Klockwork Insight Pro con- 
ducts code reviews asynchro- 
nously over the Web. Develop- 
ers are notified that code is 
ready for review through an 
RSS feed. They can then identi- 
fy code changes, assign actions 
and review potential defects, 
according to Klocwork. 

"Code review is the type 
thing that we all hate doing, but 
it's one of those things you have 
to do in any mature develop- 
ment process," Fisher said. 
"The actual purpose of the code 
review is really difficult to get 
down to in terms of, Ts what 
you've done functionally and 
performance correct?' depend- 
ing on what your definition of 
'correct' happens to be. There 
are so many other things that 
you tend to get bogged down in 
when you have these face-to- 
face reviews. 

"So with Klockwork Insight 
Pro, someone that made a 
modification six months ago 



can perform a valuable code 
review," he added. 

Klocwork Insight Pro also 
attempts to simplify code refac- 
toring by automating the 
process. Fisher described this as 



a refactoring capability within 
the editing environment that can 
do a variety of common refactor- 
ing actions for things like renam- 
ing entities, extracting functions 
and in-lining expressions. 



"It's all this kind of stuff that 
just takes the quirkiness out of 
the code you've written and 
allows you to work towards pat- 
terns that your organization as a 
whole understands," he said. 



"This is sort of the first step that 
we'll be applying in this direction 
that helps you create good code 
that prevents you from spending 
a day just trying to figure out 
what the module's about." I 
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The Fastest Way to Build Native Windows Applications 

U Delphi 2010 makes if easy to write H Delphi 2010 is addictive to use. 



efficient, readable code, even when 
designing very complex systems with 
high performance requirements. J 5 
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Touch/Gesture- En able Your Apps with Ease -cutting-edge 
capabilities to touch -and gesture -enable your applications for 
Windows* 2000. XR Vista r and Windows' 9 7 



Connect to More Databases and Tiers - high-speed data access 
drivers for Oracle, Microsoft* SQL Server, IBM* DB2® Sybase*, 
InterBase -, MySQL® P Firebird, and more 



Fast Apps Faster -over 120 productivity enhancements including IDE 
Insight, cods formatter, C++ class explorer, new multi -thread debugger, 
background compilation, and much more 



Windows 7 Ready - Windows 7 APi T Direct2D, multi-touch, and more 



Get Free Trials 

www. em bareadero . com 



T lf you currently own a 2005 or earlier version of Delphi or C++ Builder, you must 
upgrade to the 2010 release by December 31, 2000 to be eligible for upgrade 
pricing— a savings of 34% -53% off the new user pricet Starting January 1, 2010, 
you'll have to pay the full new user price to get version 2010. For more info on this 
program and to access migration resources, visit the RAD Studio 2010 Migration 
center at http^/A^ww.embarGadero.conVrad-studio-201 0- migration -center 
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Apache Foundation celebrates 10 years 

Non-profit turned free software from hippie movement to business essential 



BY ALEX HANDY 

It's been a long time since the 
National Center for Supercom- 
puting Applications held sway 
over the way the Web worked. 
But it is with the NCSA that the 
story of Apache begins. 

Five years after Web 
pioneers from around 
the Internet began modifying 
the NCSA HTTPd server for 
their various business purposes, 
the Apache Software Founda- 
tion was formed. Ten years 
after that, the ASF has become 
one of the most influential and 
successful open-source bodies 
in the world. 

At ApacheCon, held the first 
week of November in Oakland, 
software developers and IT 
administrators came from 
around the world to learn about 
the more than 100 projects now 
under the Apache Foundation's 
umbrella. It was a markedly dif- 
ferent time and place for a 
Foundation that began as just 
another free software move- 
ment with only one project. 

Justin Erenkrantz, president 
of the ASF, said that the sheer 
size of the ASF is the biggest 
change for him since he joined 
in 2001. 

"It's gotten a lot bigger," he 
said. "When we started out in 
2001, it was maybe five or six 
projects. There was the Apache 



ANALYSIS 



HTTP server, there was this 
thing called Jakarta... Since 
then, there has been a tremen- 
dous explosion of projects: 
There are 100 different pro- 
jects [at ASF now], about 75 

top-level, and 30 in the 

incubator. 

"Apache Labs is a 
place for individuals to say, T 
want a sandbox to play with, I'm 
not sure if it merits being a 
community yet.' You look at 
that, and it's a tremendous scale 
change when you're only deal- 
ing with 100, maybe 200 com- 
mitters at most, and now we're 
dealing with 2,000 committers 
on a daily basis." 

NOT WITHOUT CONTROVERSY 

Over the years, the Apache 
foundation has seen its share of 
controversy. But when com- 
pared to other free software 
foundations and groups, the 
ASF has been relatively 
innocuous. 

Aside from public scraps 
with Microsoft and Sun 
Microsystems over the years, 
neither company has been will- 
ing to sever ties with the foun- 
dation. Indeed, Microsoft's IIS 
HTTP server has long had only 
the Apache Web Server as its 
primary competition, and yet 
Microsoft recently joined the 
Apache foundation. 
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[ Celebrating a Decade o^ 
Open Source Leadership 
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You can't celebrate 10 years without a birthday cake. 



Compare that to how the 
Free Software Foundation is 
perceived by major businesses. 
Bernard Golden, CEO of Nav- 
ica and author of "Succeeding 
With Open Source," said that 
the ASF won over business 
users with its less-restrictive 
licenses. The FSF, by contrast, 
typically engages with corpora- 
tions through legal actions and 
threats. 

"The license the ASF uses 
does not bring them into con- 
flict with commercial compa- 
nies," he said. "There's no one to 
say, Tou're ruining our business 
by giving away free software or 
making a derivative work.' It's 
not like it's some vendor. 

"The Apache Software 
Foundation is us: whoever's 
participating. They've brought 
together disparate companies, 
companies that are actually 
competitors. And the people in 
it are pretty nice, they're not 
polarizing people like some 



members of the free software 
community. They're too nice. 
There's nobody who goes, They 
really screwed us.' " 

Erenkrantz said that keep- 
ing competitors at the table to 
collaborate actually spurs other 
companies to join up for fear of 
being left out. 

"As people say TBM is here, 
HP is here, Sun is here,' so 
Microsoft looks and says, 
'Everyone else is here, why 
aren't we here?' But IBM may 
want features x, y or z, but these 
companies have to understand 
it will have to pass the commu- 
nity test," he said. 

"The big thing in our social 
dynamic is that any person can 
veto. They can stop and say, 
This is wrong, stop it.' That 
person may be just contributing 
at night, but they have the same 
amount of influence as the per- 
son with a 9-to-5 job. It's not 
very commonly used, but it's a 
way to get consensus." 
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Sun Microsystems' chief open 
source officer, Simon Phipps. 




Brian Behlendorf, founding member of the Apache Group and one of the 
original committers to the Apache HTTPd Server project, was on hand for 
the festivities. 



Bruno Ferreira de Souza, head of the Society for Java Users in Brazil, and 
Geir Magnusson. Magnusson, creator of the Apache Harmony Project, said 
he has essentially backed away from that project. 



Aaron Kimball, software engineer 
at Cloudera, led a day of Hadoop 
training before ApacheCon began. 

Indeed, the only remaining 
controversy at the Apache 
foundation is its continuing 
dispute with Sun Microsys- 
tems over the release of the 
Test Compatibility Kit for the 
Apache Harmony project. 
Geir Magnusson, creator of 
the Harmony project and an 
ASF board member, said that 
he has stepped back from Har- 
mony for now, but he still 
hopes the Oracle acquisition 
of Sun will yield the release of 
theTCK. 

For its part, Sun continues 
to maintain that its employees 
cannot make forward-looking 
statements due to the acquisi- 
tion by Oracle, and thus cannot 
discuss the future possible 
release of the TCK. But you can 
be sure that Sun's representa- 
tive at ApacheCon, chief open 
source officer Simon Phipps, 
had a piece of birthday cake 
anyway. 

Even when the ASF is feud- 
ing with a member organiza- 
tion, it's still willing to share its 
birthday cake. I 





DevTest Studio 



The integrated solution for defect tracking, test management and automated testing 



DevTrack 

Use DevTrack to track defects/issues 



DevTest 

Use DevTest to manage your testing 



TestLink 



Track each issue through a definable 

workflow 

SCM integration - track fixes against their 

source code deliverables 

Deploy a resolution across multiple 

releases, versions and products 

Reporting and metrics to illustrate the 

entire defect lifecycle 



Create a central repository for your test 

cases, knowledge items and automation 

scripts 

Schedule releases and test cycles using a 

wizard-driven interface 

Execute test assignments and submit 

defects from the same interface 

Track results with real-time dashboards 

and reports 



Add automated tests to the DevTest 

test library 

Schedule automated tests along with 

manual tests 

Launch automated tests from the 

DevTest interface 

Track automation results with 

real-time dashboards and reports 
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Checkmarx creates CxQL for code analysis 



BY JEFF FEINMAN 

An Israel-based company is try- 
ing to make its mark on source 
code analysis with an original 
query language and virtual 
compilation technology. 

Checkmarx s CxSuite source 
code analyzer suite consists of 
CxManager, a framework for 
keeping track of security threats 
found in source code; CxDevel- 
oper, source code analysis soft- 
ware with hundreds of security 
queries to cover vulnerabilities; 
and CxViewer, which allows 
developers to load scanned pro- 
jects and view reports on secu- 
rity vulnerabilities and coding 
practice compliance. 

CEO Emmanuel Benza- 
quen said the query language, 
CxQL, is one of Checkmarx's 
biggest differentiators. CxQL 
can query programming lan- 
guages, including C/C + + , Java, 
.NET, and Salesforce. corn's 
Apex and Visual Force. 

"Today, all source code ana- 
lyzers emulate common com- 
pilers and attempt to find vul- 
nerabilities based on scanning a 
reconstruction of the code, 
said Benzaquen. 

"This approach introduces 
imprecision. By contrast, when 
Checkmarx completes a scan, 
all code and flow properties are 
stored in a database and can be 
interrogated by [CxQL] for vul- 
nerabilities.' 

Benzaquen said users can 
customize queries to meet cor- 
porate coding standards and 
policies. He also claimed that 
Checkmarx's query capability 
helps developers and security 
professionals find complex 
business logic flaws. 

Another notable feature in 
Checkmarx's source code analy- 
sis technology is a virtual com- 
piler that transforms code into a 
form that contains structure 
and application flow properties. 
Benzaquen said the virtual 
compiler can inspect applica- 
tions without lengthy setups 
and configurations. Traditional- 
ly, he said, static code analyzers 
rely on compilation and con- 
verting source code into exe- 
cutable software that comput- 
ers can understand in order to 
analyze the code. 

The Checkmarx Virtual Com- 
piler, meanwhile, lets developers 
scan unbuilt code so static analy- 
sis can take place earlier in the 
development life cycle. 

"Getting the code into a 



state where it can be compiled 
and linked is not an easy task, 
particularly with delocalized 
development teams," Benza- 
quen said. "The Checkmarx 
Virtual Compiler eliminates 



this problem by removing the 
dependency on compilation 
and linking for software testing. 
"Testing is not dependent on 
having all modules complete, 
duplicating the development 



environment or creating a final 
build test harness. Instead, 
scanning can take place early 
and often as the code is devel- 
oped. Once scanning is com- 
plete, all code and flow proper- 



ties are stored in a database that 
can be interrogated for vulnera- 
bilities/ 

Checkmarx was founded in 
2006 and gained prominence 
with the commercial release of 
CxSuite in early 2009. The 
company is headquartered in 
Tel Aviv and also has an office 
in New York. 
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Presenting Telerik OpenAccess - finally an ORM that's easy to use. 



Forward and Reverse Mapping Capabilities 

OpenAccess meets your specific needs by letting you choose whether to start the mapping from an 
existing database or just persist the application classes that you already have. OpenAccess also supports 
a rich variety of mappings for collections and class hierarchies. 



Tight Visual Studio Integration 

OpenAccess it tightly integrated in Visual Studio .Net so you don't have to leave your favorite IDE. 
You will see your persistent classes in the solution explorer, nicely separated from your business 
logic code. 



Intuitive Point-and-click Wizards 

With OpenAccess ORM you can set up your persistent model codelessly and with just a few clicks. 
Intuitive yet powerful wizards will help you master the mapping process even if you haven't ever used 
an ORM before. 



Full LINQ Support 

OpenAccess ORM offers a complete support for LINQ, providing all features being used in the 
"Microsoft 101 LINQ Samples". 



Advanced Features Out-of-the-box 

OpenAccess offers an array of built-in heavy-duty features such as full support for SQL Azure, distributed 
level 2 cache, fetch plans, support for n-tier and disconnected applications, and many more. 



US Sales: +1.888.365.2779 • Germany Sales: +49.89.8780687.70 • Europe HQ: +359.2.80.99.850 • e-mail: sales@telerik.com 



www.sdtimes.com 



Software Development Times . December 1, 2009 . 



NEWS 



15 



dynaTrace manager reports on AJAX transactions 



BY JEFF FEINMAN 

Application performance man- 
agement company dynaTrace 
Software is honing its abilities 
in on AJAX applications. 

dynaTrace AJAX Edition, 
released in November, is a free 



performance manager that 
reports on complex AJAX appli- 
cations. 

The software will automati- 
cally collect information on 
AJAX transactions and display 
information around JavaScript 



usage, network time, and other 
performance characteristics. 
Andreas Grabner, senior archi- 
tect and technology strategist 
for dynaTrace, said the software 
can behave like an automated 
tester because developers can 



capture performance character- 
istics of applications on differ- 
ent browsers. 

"dynaTrace automatically 
packages all the information 
together in what we call a ses- 
sion," Grabner said. "Then a 
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summary page gives an overview 
of the stuff you did while you had 
the browser open. We show you 
how many resources have been 
downloaded for the page, and we 
show you how much came from 
the client side." 

Grabner added that dyna- 
Trace AJAX Edition shows how 
much time is spent on the net- 
work, breaking it down to spe- 
cific interaction time with dif- 
ferent network components. 

dynaTrace AJAX Edition 
also shows how much Java- 
Script was used in a given trans- 
action, specifically during load 
events. Grabner explained that 
a load event is when a page is 
fully loaded in terms of HTML 
and images, and all JavaScript 
files are then executed to mod- 
ify the page. 

"We basically break the exe- 
cution time down," Grabner 
said. "There is a timeline that 
shows, from a network perspec- 
tive, which objects were down- 
loaded, and we also see render- 
ing time and JavaScript time." I 

Revolution 4.0 
gets three tiers 

BY ALEX HANDY 

Runtime Revolution has updat- 
ed its rapid development and 
deployment environment to ver- 
sion 4.0. Revolution 4.0 still uti- 
lizes the RevTalk programming 
language, but it is now available 
in three different versions. 
These new versions are targeted 
at developers based on skill lev- 
el, and the new revMedia edi- 
tion is the first to be offered free 
of charge to developers. 

The other two new versions 
of Revolution 4.0 are revStudio 
and revEnterprise, the former 
being targeted at more stan- 
dard developers and the latter 
being aimed at enterprise users. 
RevEnterprise also includes an 
internal database and advanced 
security features not found in 
revStudio. 

"The last two years have 
seen the most impressive 
growth in our business, point- 
ing to a correlation between a 
tough global economy and the 
resourcefulness of profession- 
als who need to do more with 
less," said Kevin Miller, Run- 
time Revolution CEO. 

"Our goal is to enable rapid 
creation of applications, and 
that's exactly what we're doing 
with Rev 4.0. With a free ver- 
sion and Web plug-in, anyone 
can begin writing software 
right away." I 
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Servoy adds clustering for Web services 



BY DAVID WORTHINGTON 

Servoy has shipped version 5.0 
of its 4GL Web services plat- 
form. The update features 
built-in clustering capabilities 
that extend to the cloud, as well 
as end-user customizations that 
persist across sessions. 

The platform is based on 
Java, and can compile both 
native and Web client applica- 
tions. Developers design screens 
to build applications and use 
JavaScript to write custom busi- 
ness logic. 

Servoy generates a multi- 
tenancy layer between the 



application and databases, and 
it is designed to save develop- 
ment time by incorporating 
functionality that is usually 
found in Java frameworks. 

"From plain old Java, you 
would need 20 frameworks to 
simulate [Servoy], from Spring 
to the Hibernate Java persis- 
tence framework to AJAX," said 
CEO Jan Aleman. 

Java and .NET are "great," 
but their complexity drains 
developer productivity, Aleman 
added. "Frameworks help, but 
only address one or more issues." 

Servoy 5.0 addresses the issue 




Servoy 5.0 also has end-user customizations that persist across sessions. 



of scaling applications onto mul- 
tiple servers with its built-in clus- 
tering. "Before this, developers 
had to stick load balancers in 
front of it," Aleman said. 



The clustering is real-time, 
and administrators can add or 
remove servers without restart- 
ing the application, Aleman 
said. Data is broadcast from the 



Coverity 5 keeps eye on multiple projects 



BY JEFF FEINMAN 

Coverity has brought new 
defect-tracking and identifica- 
tion capabilities to an update of 
its software integrity suite. 

Coverity 5, announced in 
November, has a feature called 
defect-impact mapping that lets 
users identify how a defect can 
impact multiple codebases or 
projects. Dave Peterson, CMO 
for Coverity, said Coverity 5's 



defect-impact mapping capabil- 
ities can save time because a 
developer can see all projects 
being impacted, and can notify 
team members on how to fix 
the defect. 

"From a developer stand- 
point, this is a big deal because 
any developer working in a dis- 
tributed organization is using a 
lot of shared code," Peterson 
said. 



"What happens a lot is when 
the developer introduces a 
defect, that defect might show 
up in 10 other places, and there- 
fore there're 10 different teams 
trying to put out that same fire." 

Coverity 5 also lets develop- 
ers automatically filter through 
problems found during scans to 
identify the highest severity 
defects. New reporting capabil- 
ities help users track fixed 



defects and recognize trends 
among defects. 

When defects are found, 
Coverity provides links to the 
Common Weakness Enumera- 
tion, a third-party site that pro- 
vides information on common 
defects in software. This can 
provide developers with knowl- 
edge on defects they may not 
be familiar with. 

Coverity 5 will be generally 
available by the end of the first 
quarter of 2010, according to 
the company. I 



user to the server so that 
changes to records are persist- 
ed as they happen. 

The clustering permits 
applications to exist in hybrid 
clouds, both public and private, 
Aleman said. Security is built in 
at the transportation level with 
SSL, encryption can be built 
into the application, and devel- 
opers can use their own certifi- 
cates for authentication, he 
added. 

Developers may also now 
publish RESTful Web services 
from their Servoy scripts. 

On the client-side, Servoy 
has extended drag-and-drop to 
any object, and the feature also 
works within browsers. Devel- 
opers register events at run- 
time, and they are not required 
to write JavaScript code, Ale- 
man noted. 

Lastly, a new runtime form 
editor allows users to change 
the layout of forms. The 
changes persist across sessions, 
even with the Web client. 

Pricing begins at US$349 per 
user. Servoy also has ISV pricing 
through its OEM relationship 
program. A fully featured trial 
version called Servoy Communi- 
ty Edition is now available for 
non-commercial use. I 




Do you feel 
Hammered by your 
Database Vendor? 

Are you tired of expensive fees for deployment and support? 
Do you wish their licensing could better fit your business model? 
Do you need better multi platform portability? 
Is your current level of support not meeting your needs? 
Are you looking for better margins/profits? 

If so try: 

c-treeACE Fl 

the right-size Database k, A 



) 2009 FairCom Corporation 



Download your free SDK • www.faircom.com • 800-234-8180 




\ 




Discover Model Driven Development 

® Analyze and Visualize the Problem 

Capture Requirements, Processes, Strategy maps & Domain models. Reverse engineer code, 
XSD, WSDL and database schema. Visualize executing .NET, Java and Windows apps. 

® Design and Document your Solution 

Using UML, SysML, BPMN, DoDAF, MODAF, Zachman, TOGAF and more. Integrate with 
Visual Studio 2005/2008 and Eclipse. Collaborate using team based repositories. 

® Transform and Construct Components 

Static and fully executable code. Use MDA Transforms. DDL, BPEL, C/C++, C#, Delphi, 
Java, PHP, Python, VB, HDL, Verilog, SystemC, ActionScript, ADA, XSD, WSDL, XML 

® Test, Verify and Maintain 

Write, manage and track Tests Cases, Changes, Features, 
Issues & Defects. jUnit and nUnit support. Object workbench, 
integrated Debugging and State Transition verification. 

® Collaborate, Control and Manage 

Full Traceability and flexible Model Views. Resource tracking, 
Version Control. Discussion Forum. Diff/Merge capability. 
Security. Powerful HTML and Rich Text report generators. 



Solutions for Every World 

Visitsparxsystems.com/everyworld 




SYSTEMS 



18 



NEWS 



Software Development Times . December 1, 2009 . 



www.sdtimes.com 



IBM puts Rationale ALM into the cloud 



BY JEFF FEINMAN 

IBM has rolled out new capa- 
bilities from its Rational tool 
suite for developing applica- 
tions in both public and private 
cloud environments. 

IBM Rational Software 
Delivery Services for Cloud 
Computing, released in 
November, includes application 
life-cycle management software 
for developing and testing in 
the IBM Cloud. IBM execu- 
tives said these new services 
can help organizations reduce 
the time it takes to provision a 
test environment. 

In talking about the benefits 
of developing and deploying on 



the cloud from IBM's perspec- 
tive, Ashok Reddy, director of 
software delivery platform and 
security for IBM Rational, said a 
big pain point developers have 
today is the time and effort it 
takes to deploy development or 
testing software. For example, a 
developer or development team 
has to install and configure soft- 
ware and middleware, which 
could take weeks. In contrast, 
with IBM's new services, a 
developer can provision a devel- 
opment environment by choos- 
ing images from a catalog, which 
can be done in minutes, he said. 
"Most development teams 
today have quite a bit of their 



infrastructure tied up for build- 
ing and test purposes," Reddy 
said. "Here, we have a stan- 
dardized way of making build 
and test pieces available to 
them, and if they need to make 
a change, they can do that in a 
very short period." 

Also new from IBM is IBM 
Smart Business Development 
and Test on the IBM Cloud, 
a free public cloud beta 
that provides cloud storage and 
application deployment ser- 
vices. Reddy said IBM is offer- 
ing a private cloud implementa- 
tion of Rational's development 
products. 

"We can actually go and 



implement a private cloud for a 
customer, and when they use 
Rational tools, it's a fully inte- 
grated offering where, if they 
want to build or test, they can 
leverage the public cloud infra- 
structure," Reddy said. "That 
way, they don't have to buy and 
maintain all the capital expens- 
es for what's needed for build 
and test. They can make sure 
they store the information 
locally, but are able to expand 
to a public cloud." 

Reddy said IBM has a lot of 
experience in running data cen- 
ters and forming service-level 
agreements with companies to 
provide data center services, so 



the company is leveraging that 
experience to properly manage 
client data. Additionally, IBM's 
cloud infrastructure allows for 
third-party software and ser- 
vices, Reddy claimed. 

From a testing perspective, 
developers and testers don't 
have to wait for an IT profes- 
sional to set up a test of IBM 
Smart Business Development 
and Test on the IBM Cloud, 
according to Reddy. "IBM is 
providing a set of images that 
can be preconfigured for IBM 
middleware," he said. "So the 
customers can simulate their 
application pre-production, test 
it and then actually deploy it." I 



Proxisoft preps Java for Web 



BY DAVID WORTHINGTON 

Proxisoft, a startup, has 
unveiled a middleware solution 
called Netrifex, which auto- 
mates the creation of Web ser- 
vices from Java applications. 

Netrifex takes existing Java 
code and creates a mirror 
image of bytecode at runtime, 
then modifies it to support Web 
services, said company founder 
Mark Hansen. It uses special 
class libraries and does not 
require a special Java Virtual 
Machine, he said. 

Supported Java EE contain- 
ers include Apache Tomcat and 
Oracle WebLogic Server. JBoss, 
WebSphere and others will be 
added soon, according to the 
company. 

"This approach allows Web 
service development best prac- 
tices to be bundled into prod- 



uct... It knows how to generate 
services that make sense and are 
robust as services created under 
the Spring [framework] or 
[Apache] Struts," said Hansen. 

The SOAP Web services 
made by Netrifex use HTTP and 
SSL authentication, and they 
preserve the security wrapped 
into the original application 
without modifying the underly- 
ing application, Hansen said. 

Transactions from the Web 
services are delegated down to 
the original Java application from 
the Netrifex middleware, which 
is invoked through XML conver- 
sion, Hansen explained. 

Developers can offload the 
XML processing from the Java 
application server onto a sepa- 
rate machine or virtual machine, 
and Netrifex is compatible with 
appliances that accelerate XML 
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Netrifex middleware handles trans- 
actions between back-end Java 
applications and Web services. 

processing, Hansen said. 

Pricing is per CPU, and 
US$20,000 is the entry-level 
price for a dual-core CPU, 
according to Hansen. I 



PARTNERS 'SNAP TO' 
FOR DATA INTEGRATION 



BY DAVID WORTHINGTON 

App stores have proven suc- 
cessful in the consumer mar- 
ket, so much so that SnapLog- 
ic is applying the model to its 
data integration platform by 
creating a new service called 
SnapStore. 

SnapStore is a marketplace 
for SnapLogic's customers and 
partners. Partners create solu- 
tions called "Snaps" based 
upon SnapLogic's open-source 
DataFlow API. These Snaps 
can be connectors, pipelines or 
data transformations. 

The SnapStore marketplace 
opened for a private beta in 
November. CEO Gaurav 
Dhillon could not provide a 
name for any the integrators 



that were participating in the 
beta, but he said that interest 
among SnapLogic's partners 
was high enough for the com- 
pany to predict thousands of 
applications in the coming 
year. 

Partners will receive 70% of 
Snap application revenue. 
SnapLogic must approve Snaps 
before they are sold to cus- 
tomers. 

Developers can create a 
Snap instead of using "throw- 
away scripts," said Dhillon. "It 
adds value to users and gives a 
revenue stream back to them." 

In order to participate in the 
private beta, those interested 
can apply through SnapLogic's 
website. I 



JNBridge provides transactions between Java and .NET 



BY DAVID WORTHINGTON 

JNBridge, a company that 
makes tools to bridge Java and 
.NET applications, has an- 
nounced new editions of its 
software that makes distributed 
transactions interoperable. 

JNBridgePro 5.0, announced 
in November, enables cross- 
platform, bidirectional trans- 
actions between Java and 
.NET. A two-phase commit 
protocol ensures that transac- 
tions are completed, and all 
operations on both sides will 
roll back if a transaction fails, 
said CTO Wayne Citrin. 

In the past, JNBridge 
focused on making transac- 



tions interoperate through 
adapters, Citrin explained. 
"Now, we have integrated the 
transaction scope. 

"It's hard to roll your own 
solutions," Citrin added. "WS- 
AtomicTransaction [WS-AT] 
was a past attempt to do this, 
but the problem is that it has 
ambiguities in it: Different 
vendors have incompatible 
implementations . " 

WS-AT is an OASIS stan- 
dardized protocol for managing 
atomic transactions between 
distributed applications. 

JNBridge also released 2.0 
versions of its JMS Adapter for 
.NET and its JMS Adapter for 



BizTalk Server. The adapters, 
which break compatibility with 
earlier versions, provide more 
flexibility in architecture by 
allowing developers to run 
JMS and .NET in separate 
processes, and to decide 
where those processes reside, 
Citrin said. 

The BizTalk Server Adapter 
broadens support for messag- 
ing patterns, and the JMS 
adapter now uses Java EE 5 
technology. 

The JNBridgePro 5.0 and 
the JNBridge JMS 2.0 series 
adapters will be available for 
download from JNBridge's 
website, beginning Nov. 16. I 
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Microsoft creating open spec for Outlook data 



BY DAVID WORTHINGTON 

Microsoft has begun the 
process of documenting its 
Outlook Personal Folders file 
format for public release. 

The documentation will 
enable third parties to get to 



data in a more platform-inde- 
pendent way, said Paul 
Lorimer, group manager for 
Microsoft Office Interoperabil- 
ity. It will also allow customers 
to migrate Outlook data to the 
cloud, search e-mails for e-dis- 



covery, or facilitate corporate 
governance policies, he added. 
Enabling calendar sharing is a 
secondary goal. 

Presently, the data must be 
accessed using Microsoft's Mes- 
saging Application Program- 



Interface API, which 
requires Outlook to be installed. 
"We are reacting to a world 
where more and more cus- 
tomers have heterogeneous 
projects, and [we] have been 
soliciting feedback from every- 
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one: customers, partners and 
competitors," Lorimer said. 

The format will be placed 
under Microsoft's Open Speci- 
fication Promise, a commit- 
ment by Microsoft not to assert 
its intellectual property rights 
for covered technologies. 

Microsoft is holding work- 
shops with industry participants 
to obtain feedback to ensure that 
the documentation meets their 
needs, Lorimer said. The final 
documentation will be available 
in the first half of 2010. I 

Artisan gets 
Extessy s reqs 
management 

BY JEFF FEINMAN 

Modeling company Artisan Soft- 
ware Tools has brought in new 
requirements and simulation 
products with its acquisition of 
Germany-based Extessy, which 
supplies system requirements 
and co-simulation software and 
services, along with software and 
consulting services for embed- 
ded system development. 

One of Extessys core prod- 
ucts is the EXERPT require- 
ments management platform, 
which tries to provide seamless 
exchange of files and specifica- 
tions between different software 
tools without any data loss. It 
tries to accomplish this by inte- 
grating with the Requirements 
Interchange Format, a generic 
requirements exchange format 
developed by Hersteller Initia- 
tive Software, an industry con- 
sortium that promotes quality 
assurance in software design. 

"We had SysML require- 
ments management capabilities 
in our modeling tool, but 
EXERPT does things like tak- 
ing DOORS requirements and 
transfer them into another sup- 
plier's DOORS database, or 
move them across to some- 
where else," said Hedley 
Apperly, vice president of mar- 
keting at Artisan. 

With the acquisition, Artisan 
is hoping to expand its market 
share in Germany. All Extessy 
employees are expected to join 
Artisan, and Artisan will set up 
a German headquarters at 
Extessys Wolfsburg offices. 

The acquisition follows Arti- 
san's purchase of UK-based 
Brass Bullet, a systems engineer- 
ing consultancy. Apperly said 
both acquisitions bolster the 
company's overall consulting and 
professional services. I 
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McObject extends embedded database 

eXtremeDB 4.0 adds kd-tree indexing to speed up performance 



BY ALEX HANDY 

There are two kinds of embed- 
ded databases: those used in 
embedded electronics, and 
those embedded inside other 
applications. McObject is hop- 
ing version 4.0 of its eXtreme- 
DB database, formerly focused 
on embedded electronics, can 
now fulfill both roles. 

eXtremeDB 4.0, released in 
November, adds kd-tree index- 
ing and multi-version concur- 
rency control, both of which 
increase the scalability and 
speed of this hybrid in-memo- 
ry/on-disk database. 

Steve Graves, cofounder and 
CEO of McObject, said that the 
additions in version 4.0 had 
long been on the road map for 
eXtremeDB. He said that that 
version 4.0 also includes new 
APIs for developers working 
with the database. 

"Our original API was gen- 
erated as a byproduct of 
Schema, so it was different for 
each database," he said. "Some 
developers prefer to work with 
the same API every time. The 
Uniform DB Access API allows 
them to do that. We also intro- 
duced the idea of [treating all 
sources as] logical devices and 
streamlined some of the exist- 
ing APIs. It was getting a little 
messy in the APIs to set up all 
these things. This notion of log- 
ical devices cleans that up." 

The new kd-tree indexes 
available in eXtremeDB 4.0 
should speed up performance, 
said Graves. "We've always had 
a basket full of indexes that 
developers could choose from. 
The kd-tree adds to that basket 
by incorporating a K-dimen- 
sional index. 

"Usually, if you had a Web 
forum to query on automobiles, 
you have an index for every 
field: car type, manufacturer, 
year, miles. The kd-tree allows 
you to create a single index over 
all those dimensions. It simpli- 
fies application code and 
improves performance because 
you only have to maintain a sin- 
gle index structure." 

The addition of multi-ver- 
sion concurrency control is the 
final big change to eXtremeDB 
4.0. This allows multiple users 
to edit fields and information 
within the database without the 
need for locks to keep data safe. 

Graves said that the addition 



of this new multi-version con- "We've always had a trans- the database to the transaction 

currency control came in the action manager within the manager, so developing a new 

form of a new transaction man- product and a well-defined transaction manager was fairly 

ager for the database. interface between the rest of straightforward," said Graves. 



"The application code really 
doesn't change when you're 
moving back and forth between 
the original transaction manag- 
er and the new transaction 
manager," he added, which 
means there is less chance of an 
issue arising from an upgrade. 

McObject did not publicly 
discuss pricing for eXtremeDB. I 
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www.syncfusion.com/wpf-gridperformance 

www.syncfusion.com 1 888-9DOTNET 
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ScaleOut joins data grids in clouds 

Security, LINO support are major focuses of latest StateServer version 



BY DAVID WORTHINGTON 

At Microsoft's Processional 
Developers Conference in Los 
Angeles, ScaleOut Software 
announced a new edition of its 
distributed caching software 
that integrates private clouds, 
eliminating data validation 
issues, the company said. 

ScaleOut's StateServer 5.0 
integrates data from distrib- 
uted grids by pulling it into a 
single, consistent grid in the 
cloud, said CEO William Bain. 
Data is migrated across wide 
areas and coupled together, he 
explained. 

In practice, that would 
allow an e-commerce compa- 
ny to spin up virtual servers in 
the cloud to meet seasonal 
demand while still using data 
from an on-premise shopping 
cart. 

Previously, StateServer 

operated under a push model. 
That model required program- 
mers to write application-level 



code to manage data across 
multiple grids and to use Web 
services to push and validate 
data outside of a local grid, Bain 
said. "That creates validation 
problems," he added. 

ScaleOut uses Internet 
Protocol Security to secure 
transactions, but relies on 
mechanisms from cloud 
providers, said Bain. "We are a 



storage entity and are not try- 
ing to implement transport- 
layer security." 

However, security is a focus 
of the release. StateServer 5.0 
now implements authentica- 
tion for accessing the name- 
spaces of an object's proper- 
ties. That allows organizations 
to separate groups of users 
from accessing or changing 



objects that are used by anoth- 
er group within the organiza- 
tion, Bain said. 

Developers can also scour 
data using Language Integrat- 
ed Query in .NET applica- 
tions, and queries are parallel 
across grids. Queries can be as 
finite as the properties of 
objects, such as "blue cars," 
Bain said. 



Additionally, Java program- 
mers can now perform queries 
based on the properties of 
objects. Prior releases of 
StateServer operated on meta- 
data. 

Pricing for StateServer 5.0 
starts at US$$1,895. A grid edi- 
tion that enables developers to 
perform map/reduce semantics 
initially costs $15,295. I 



Microsoft releases .NET Micro Framework as open source 



BY DAVID WORTHINGTON 

LOS ANGELES - Microsoft 
followed through on its 
promise to open-source the 
.NET Micro Framework, mak- 
ing version 4.0 available under 
the Apache 2.0 license, the 
company announced here at 
PDC '09. 

The Micro Framework is a 
modular edition of the .NET 
Framework that targets embed- 
ded developers. Microsoft's 



Developer Division started the 
community effort in after the 
company reorganized in May, 
consolidating all .NET develop- 
ment under its direction. 

Version 4.0 of the frame- 
work packages source code for 
distribution, including its Base 
Class libraries and runtime 
code. Microsoft's open-source 
community manager Peter 
Galli said the primary new fea- 
tures are an object model for 



handling HTTP client and 
server, support for multi-touch 
events, versioning for assem- 
blies, and SSL and HTTPS 
emulation. 

However, Microsoft did take 
away some functionality in 
order to make the SDK open 
source. The framework's cryp- 
tography libraries are not 
included, and Microsoft also 
stripped out its TCP/IP stack 
because it contains third-party 



software licensed from EBSnet. 

Customers that require 
those networking capabilities 
can contact EBSnet directly, 
Galli said. 

Colin Miller, Microsoft's 
product unit manager for the 
.NET Micro Framework, said 
that Microsoft continues to 
have a team of developers 
working on the project, and that 
their efforts would help move 
the product forward. I 
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Cigital, Fortify tailor security model for Europe 



BY JEFF FEINMAN 

Cigital and Fortify Software 
have created BSIMM Europe 
(Building Security In Maturity 
Model for Europe), an exten- 
sion of the security benchmark 



model that the two companies 
created in March of this year. 

Executives of the two com- 
panies said that BSIMM 
Europe, announced in Novem- 
ber, describes a set of security 



actions practiced by nine 
European firms. Those compa- 
nies include Nokia, asset man- 
agement company Standard 
Life, messaging services 
provider SWIFT, Telecom 



Italia and Thomson Reuters. 
The four other companies 
weren't named. 

"Software security is a 
worldwide phenomenon," said 
Gary McGraw, CTO of Cigital. 
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"Using BSIMM, an organiza- 
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stands, figure out how to 
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is a tool for identifying realistic 
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ing those technical software 
security activities that make 
the most sense for an organi- 
zation." 

For the original BSIMM 
study, representatives from 
Cigital and Fortify did inter- 
views with and collected data 
from nine companies, includ- 
ing Adobe, EMC, Google and 
Microsoft. The model is divid- 
ed into 12 practices, falling 
under the categories of gover- 
nance, intelligence, software 
security development life-cycle 
touch points, and deployment. 
There are 110 BSIMM security 
actions in total, according to 
Cigital. I 
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Bilski case heard in Supreme Court 

< continued from page 1 much of the issue here is the of work done by humans, rather number of existing paten 



page 

issue a patent on a method of 
hedging risk for power compa- 
nies based on weather predic- 
tions. When the Patent Office 
refused to grant a patent on this 
process, its inventors, Bernard 
Bilski and Rand Warsaw, filed 
suit against the USPTO, led by 
David Kappos. 

Erika Harmon Arner, an asso- 
ciate at intellectual property law 
firm Finnegan, Henderson, 
Farabow, Garrett & Dunner, 
worked with lead lawyer Michael 
Jakes in favor of the issuance of a 
patent to Bilski s side. She said 
that the Supreme Court justices 
asked penetrating questions, 
particularly focusing on hypo- 
theticals around what could or 
could not be patented under the 
current system. 

"The questions followed the 
lines that were expected. They 
spent much of the argument 
talking about the policy reason 
for why there are patents, and 
why the patent system should 
adapt," said Arner. 

Robert J. Tosti, a lawyer with 
the Boston firm Brown Rudnick, 
said that the decision made here 
could have a far-reaching impact 
on existing patents. He said that 

COMPOSITE USES 
REST TO EXPAND 
DATA ACCESS 

BY DAVID WORTHINGTON 

Version 5.1 of Composite Soft- 
ware's Information Server 
expands the way servers access 
and publish data through repre- 
sentational state transfer, 
according to the company. 

Information Server 5.1, 
released in November, has 
built-in integration with 
Hewlett-Packard Neoview 2.4, 
Oracle Database llg and SQL 
Server 2008. Support for third- 
party authentication systems, 
including Java Authentication 
and Authorization Service, as 
well as user token authentica- 
tion plug-ins. 

Further, developers can 
manage the life cycle of data 
services using the Subversion 
version control system and Per- 
force, said Peter Tran, vice 
president of product marketing 
at Composite. 

The update is free for existing 
customers. Pricing for new cus- 
tomer engagements is depen- 
dent on project size, Tran said. I 



patenting of processes that 
involve people. 

He added that the Supreme 
Court appeared to question the 
ability to patent any process that 
seemed to include a description 



than a process involving machin- 
ery, software or computers. 
Were the Supreme Court to rule 
that business method patents 
could not involve human-based 
processes, Tosti said a large 



ig patents might 
be up for invalidation. 

Arner said that this case was 
remarkably well attended. She 
said the lines out the door for 
admission were highly unusual in 
a Supreme Court case. The 



entire event was somewhat anti- 
climactic, however, as the jus- 
tices heard only 30 minutes of 
arguments from each side before 
shutting the public doors on the 
case until they release a ruling. 

Tosti indicated that it is not 
likely the Supreme Court will 
rule on the case before June 
2010. I 
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Fujitsu gives BPM users a helping hand 



BY DAVID WORTHINGTON 

Fujitsu's Interstage 11 BPM 
suite, released in November, 
allows users to veer off of busi- 
ness processes with unstruc- 
tured activities without having 
to contact IT, and it analyzes 
work to help managers make 
decisions. 

The ad hoc activities, which 
Fujitsu refers to as "dynamic 
tasks," are recorded, and can be 
adopted as a standard proce- 
dure at a later time. "Business 
users are no longer chained to 
processes the way they were 
initially modeled," said Fujitsu 
senior product marketing man- 
ager Amita Abraham. 

The Fujitsu BPM engine 
interprets business processes 
directly and is used to enable the 
dynamic activities, explained 
Keith Swenson, vice president 
of research and development at 
Fujitsu. 

Other changes in Interstage 
11 are the introduction of a uni- 
fied dashboard and an RSS 
task-delivery system, as well as 
performance-based task recom- 
mendations, the ability to pre- 
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Interstage BPM version 11 allows business users to veer off process model and perform unstructured tasks as 
necessary; it also records those activities. 



diet performance, and process 
pattern discovery. 

The dashboard is a reposito- 
ry for all of a user's alerts, KPIs, 
processes, reports and tasks. It 
is personalized and provides a 
side-by-side comparison of 
charts. Tasks can be delivered 
through an RSS feed so that it is 



no longer necessary to log in to 
view assignments. 

Work history, including who 
has the most experience with a 
particular task, who has had the 
most deadline extensions, and 
who is the fastest, is used to 
identify who is the right person 
for a task. Interstage takes pre- 



sent-day workload into account 
when it gives its recommenda- 
tions. 

Work history is also used to 
help organizations formulate 
more-realistic customer ser- 
vice-level agreements, said 
Abraham. Alerts and notifica- 
tions are based on historical 



process performance. 

The data is used to forecast 
tasks that an employee is likely 
to be assigned in the future, 
enabling managers to be more 
informed when they allocate 
work to team members, she 
added. 

Process wikis and a threaded 
comment feedback system help 
managers outline best practices 
and reuse process snippets, 
Abraham said. 

Interstage can help organi- 
zations fine-tune processes 
through analysis using process 
pattern discovery. Pattern dis- 
covery gives managers the abil- 
ity to standardize on hybrid 
processes, which merge 
human interactions with busi- 
ness content, data and process- 
ing from IT systems, according 
to Fujitsu. 

Interstage 11 is available 
either on-premises or as a mul- 
ti-tenant cloud service. Fujitsu 
manages its own cloud data 
centers, and it has 85 located 
worldwide, said Swenson. It is 
also being made available to 
partnered solution providers. I 
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OutSystems brings BPM to application layer 

Agile Platform 5.0 adds module to support process technologies, unify life cycles 



BY DAVID RUBINSTEIN 

Many organizations are finding 
that they need to push their 
business processes down into 
the application layer so that 
human interaction with the 
application can be prompted 
and facilitated. 

The tools within many BPM 
suites, such as rudimentary 
form designers, though, don't 
provide the means to create 
rich Internet experiences, and 
developers often have to jump 
out of the tools to write code. 
This creates a brittle business 
process-application link that 
can break if the process needs 
to be changed, and it takes the 
agile-ness of the system away. 

This is what agile platform 
provider OutSystems says it has 
heard from its large enterprise 
customers, so version 5.0 of its 
Agile Platform, released in 
November, includes an add-on 
module that unifies the busi- 
ness process life cycle and the 
agile application development 
life cycle in one platform, 



- 



according to Mike Jones, 
vice president of world- 
wide marketing for Out- 
Systems. 

"We've been focused 
on the IT side [with Agile 
Platform], but we're 
being pushed by compa- 
nies wanting help on the 
business side," he said. 
"They don't want a sepa- 
rate process model in 
BPMS, and then do their 
application development 
in our tool." 

The Agile Platform has 
long included OutSys- 
tems' proprietary True- 
Change engine, which in 
this version has been 
extended to the business 
process layer, so users can 
see how any changes would 
impact either the process or any 
application objects, Jones 
explained. This, he said, helps 
keep process definitions and 
applications up-to-date with 
each other. 

"Let's say there's a process 
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Agile Platform 5.0 uses data actions from the application layer to trigger processes. 



for approving an expense state- 
ment," Jones said. "A manager 
either approves it or not. If it's 
yes, then it flows to a finance 
person, who can either pay or 
ask for more information. You 
want to be able to bind the 
human activity to the proper 



screen [in the application]." 

And, if a new step is added, 
the application should take that 
into consideration. 

OutSystems has created a 
business activity monitoring 
application that, Jones acknowl- 
edged, "is nothing different 



from what other BPM 
tools provide, except it's 
built on the Agile Plat- 
form." Users are able, 
for example, to mash 
up key performance 
indicators with data 
coming from applica- 
tions. This give a view 
of where bottlenecks in 
the system are. 

"We've made a big 
push to incorporate the 
business process layer 
on top of the applica- 
tion layer," Jones said. 

On the developer 
side, enhancements to 
Agile Platform 5.0 
include greater multi- 
lingual support and the 
ability to send e-mails 
natively into the platform. Fur- 
ther, the platform now supports 
the 2008 family of Microsoft 
products, including SQL Server 
and Visual Studio, as well as the 
Oracle SOA Suite for Web ser- 
vices and the Oracle llg data- 
base, Jones said. I 
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W3C meets with developers on HTML 5 



< continued from page 1 

ment: Which video format 
should we use? Safari supports 
MPEG4; Mozilla is pushing for 
OGG Theora. Microsoft 
declared they will support the 
HTML 5 video element, but I 
dont think they support it yet. 

"So far, we haven't been able 
to provide one video format 
everyone can agree on. I can 
design a page that works in both 
Safari and Firefox, but I would 
have to provide two video files: 
one OGG, one MPEG." 

Tim Berners-Lee, inventor 
of the World Wide Web, also 
attended the developer meet- 
ings, where he will partake in 
the discussions around the 
future of the Web. 

He said that HTML 5 
implements many features that 
have been on his wish list for 
the Web for quite some time, 
specifically SVG support and 
the ability to parse text into 



dynamic columns that move 
around to accommodate the 
user's browser window. 

"It's been said today that, 
yes, this is a markup language 
for a Web page. But it's a com- 
puting platform, too. The really 
big shift happening here is the 
shift to being a client-side com- 
puting platform," said Berners- 
Lee of HTML 5. 



'The more one IP 
address is shared 
among machines, 
the fewer ports there 
are, and really 
practical things like 
Google Maps stop 
looking like a map.' 

—Leslie Daigle, 
Internet Society 



He added that a great deal 
of work is still left to be done 
around the validation and secu- 
rity of future Web applicaitons. 
Berners-Lee said that Web 
applications can draw upon 
APIs and information streams 
from multiple sources, and that 
the W3C team is working to 
ensure such streams can be ver- 
ified to be secure. 



DWINDLING SPACE 

Also discussed at the W3C's 
developer conference was the 
quickly dwindling supply of the 
world's IPv4 addresses. While 
this is primarily a networking 
and IT issue, Leslie Daigle, 
chief Internet technology offi- 
cer for the non-profit Internet 
Society, said that world is 
expected to run out of IPv4 
addresses between 2011 and 
2013. She also said that IPv6 is 
ready for the switch, but that 
many networks, service 
providers and content providers 
are not. 

The biggest concern for 
application developers, said 
Daigle, will be the proliferation 
of network address translation 
(NAT). Worldwide NAT usage 
increasing, said Daigle, has 
implications for applications 
that rely on IP addresses to 
resolve "geolocation and geo- 



proximity. You can discuss 
whether or not IP addresses 
are a good way to tell where 
people are, but the reality is 
there are a number of existing 
services and solutions that rely 
on this, and they're about to get 
a big surprise." 

Another issue comes from 
the fact that using NAT dimin- 
ishes the number of ports 
available on individual 
machines. "The more one par- 
ticular IP address is being 
shared among many 

[machines], the fewer ports 
there are, and really practical 
things like Google Maps stop 
looking like a map and start 
looking like a jigsaw puzzle 
because the underlying AJAX 
can't open as many ports as it 
wants," said Daigle. 

"But people aren't going to 
say, 'My network is awful.' 
They're going to say, 'Google 
Maps is broken.' " I 



Is Enterprise 2.0 the 
way of the future? 



< continued from page 1 

social media strategy at EMC, 
said that her company has used 
Enterprise 2.0-style collabora- 
tion tools to cut costs. She said 
that employees are more invest- 
ed in cost-cutting measures they 
themselves come up with, and 
that social technologies enable 
management to discuss such 
measures with the entire com- 
pany, rather than simply decree- 
ing new policies from on high. 

Flanagan also said that such 
collaborative technology took 
great organizational-wide effort 
to deploy. "We've started bot- 
tom-up with some forward- 
thinking folks who'd get right 
on board at the start," she said. 

"That wasn't going to be the 
only solution for us, though. We 
had to find managers who saw 
the value in this as well. This is 
not a cure-all or a fix-all type 
transformation. It's not like now 
we have Enterprise 2.0 and 
we're now open and transpar- 
ent. It's just an enabler to get 
folks to that stage. You really 
have to have those advocates 
across the organization." 

That being said, even the 
most valiant of management 
alliances can't do much without 
money to back up their proposals 



for installing Enterprise 2.0 tech- 
nology. Megan Murray, commu- 
nity manager and project coordi- 
nator at consulting firm Booz 
Allen Hamilton, said that her 
company was able to place a val- 
ue on existing, ineffective com- 
munication techniques, and that 
this helped to exemplify the 
need for new "2.0" systems. 

"We had a four-month-long 
e-mail 'reply-all-a-thon' on a 
3,000-person mailing group," 
she said. "Someone copy/pasted 
the biggest thread they could 
find, applied some analysis to it, 
and said, 'Here's how much time 
it takes to reply to all, how much 
time it takes to hit delete, etc. 
Let's count all the people and 
figure out how much it costs us 
consultants to deal with this.' 

"The end result was 
US$250,000. If something as 
small and insignificant as a 
'reply all' can have that dollar 
amount attached to it, imagine 
how much the big things cost." 

As if to address this very 
problem, Enterprise 2.0 also 
held a keynote given by mem- 
bers of the Google Wave team, 
who explained how accountabil- 
ity and collaborative tools will 
enable Wave to replace e-mail 
systems within enterprises. I 



Incubator takes in Subversion 



< continued from page 1 

ergy between the two entities, as 
the communities work closely 
together and all of Apache's pro- 
jects use Subversion for code 
version control, according to Bill 
Portelli, CEO of CollabNet, 
which began the Subversion 
project nearly 10 years ago. The 
move to Apache, he said, was a 
couple of years in the making. 

"There is such an overlap 
between the Subversion and 
Apache communities," he said. 
"They use common file servers 
and Web servers. About 15 core 
Apache developers are core 
Subversion developers, so it 
was a natural progression." 

A goal of the move is to 
amplify and accelerate Subver- 
sion development by putting it 
out into a wide community of 
contributors, Portelli said, while 
noting that CollabNet still wants 
to maintain its leadership in the 
project. "Of the top 20 develop- 
ers who committed code [to 
Subversion], 80% are CollabNet 
or ex-CollabNet developers," he 
said, adding that the company 
will continue to invest in devel- 
opment and marketing. 

"At the end of the day, it's 
really just a URL change for 
developers," he said. 

"Since its inception, the Sub- 
version community has modeled 
itself using many of the Founda- 




CollabNet was on hand to celebrate both Apache's birthday and its own 
entry into Apache's Incubator. 



tion's principles, including the 
Apache license, our voting struc- 
ture, and building upon a diverse 
range of contributors," said 
Justin Erenkrantz, president of 
the Apache Software Founda- 
tion, in a statement released at 
ApacheCon in Oakland. "It's a 
natural fit." 

The Subversion project will 
eventually migrate from its site 
to the Apache site. Certified 
binaries still will be available 
from third-party sites such as 
CollabNet, the corporate spon- 
sor of Subversion, Portelli said. It 
is those binaries, he added, that 
separate what CollabNet is offer- 



ing around Subversion from the 
efforts of other companies. 

CollabNet pulled together 
the first team of developers to 
work on Subversion in 2000 as a 
means to create a replacement 
to the CVS version control sys- 
tem, which was quite limiting. 
CollabNet enlisted Karl Fogel 
and Jim Blandy (who came up 
with the name), who were 
already running a company that 
supported CVS installations. 
The 1.0 release of Subversion 
occurred in February 2004. 
Version 1.6.6 dropped in Octo- 
ber, and the group is working 
toward a 2.0 release. I 
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Introducing Folder Diff, 

a productivity feature of Perforce SCM. 
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Perforce Folder Diff 



Folder Diff es an interactive, side -by- side display far comparing the state of 
any two groups of files. 

Use Folder Diff to quickly determine the differences between files in folders,, 
branches, Jabels, or your local disk. This is especially useful when 
performing complex code merges. 

And when you've been working offline, Foider Diff mokes it a snap To 
reconcile and catch up with the Perforce Server when you get hack online. 

Folder Diff is fust one of the many productivity tools that come with the 
Perforce SCM System. 
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Download a free copy of Perforce, no questions 

asked, from www.perforce.com. Free technical support is 
available throughout your evaluation. 
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The weak link in most software development infrastructures is easy to spot: 

it's that bottleneck to agile development known as the build-test-deploy process. 

It's not just a technical issue; it's a business issue, because every hour spent dealing with manual scripting, 
homegrown tools, and isolated build servers is an hour that can't be spent on software innovation. 



Find out how Electric Cloud has enabled reliable Continuous Integration as part of an agile 
build-test-deploy process for Intuit, Qualcomm, Caterpillar, and other leading enterprises- 
reducing annual development costs by as much as $2 million and enabling development teams 
to focus on other things... like producing great software. 

Visit www.electric-cloud.com to learn more. 
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Standing in the 
way of agile 

Even after an organization makes a decision to go agile, 
many impediments and pitfalls remain to be overcome 



BY DAVID RUBINSTEIN 



T 



he notion of agile software development has gained 
near-universal mind share in the eight years since the 
Agile Manifesto was penned. Meanwhile, adoption keeps 



ramping up as more organizations look 
to reap the benefits of getting usable 
software on time and within budget. 

The idea of waterfall development — 
months of requirements gathering and 
writing, setting the project scope and 
estimating its cost and time to comple- 
tion, writing the code, then throwing it 
over the wall to QA to make sure it 
works and does what is intended — 
seems so, well, last century. 

Yet even knowing all this, organiza- 
tions that are ready to move to agile — or 
think they are ready to move to agile — 



still find many impediments and pitfalls 
on the road to this different approach to 
software development. 

Part of the problem lies with the 
expectations organizations have when 
they decide to adopt agile practices. 
"People tend to dive in with both feet 
and set up camps with opinions and 
views" of what they should gain from 
agile, said Alex Adamopoulos, founder 
of boutique agile consultancy Emergn. 

"The expectations are unrealistic. 
Years ago, there was a silver bullet 
mentality toward agile. We spend a lot 



of time deprogramming people. You 
can't have agile purists. You should 
apply it in an organization where it 
makes sense." 

Chris Clarke, vice president of prod- 
uct management at CollabNet, called it 
a "witch's brew" of agile. "What agile are 
we talking about? Do we do Scrum pre- 
scriptively? A lot of people love the parts 
they love, but can't use it as a prescrip- 
tive recipe," he said. 

But IBM agile program manager 
Scott Ambler cautioned that "It's easy to 
say, Tailor your agile practices,' but that 
assumes you know how to do so. It's 
pretty hard to do on your own." 

This might be because organizations 
are not getting the training and messag- 
ing they need from the agile community. 



"Religion meets reality and stuff hap- 
pens," Ambler said. 

WHEN AND HOW MUCH? 

Even after an organization has a realis- 
tic view of what agile can offer, perhaps 
the biggest roadblock to successful 
agile development is in the way soft- 
ware projects are scoped and funded. 
With the waterfall method, customers 
come to the software maker with a list 
of features they want in the software. 
Business analysts then go off for 
months at a time to turn the business 
requests into a massive requirements 
document, and they determine that the 
software can be built for a certain cost 
in a certain time frame. 

But Ambler believes organizations are 
in denial about the way they predict pro- 
jects. "The only way a project like that can 
come in on time and within budget is if 
questionable things happen," he said. 

"This type of [development predic- 
tion practice] that sets a fixed schedule 
and a fixed scope puts projects at risk. 
There will be a lot of deception and 
jumping through hoops to make it look 
like the projects running right, but 
changes to the project will be ignored, 
and changes to the schedule and budget 
will be slipped in." 

Instead of taking a gamble by trying 
to predict how a project will come out, 
agile, Ambler said, is honest. There is a 
little bit of upfront modeling and archi- 
tecture, and then the development team 
can produce good guesses as to time, 
cost and functionality. The development 
shop will give the customer greater visi- 
bility into the project, so the customer 
can then decide if it wants to invest 
more, or wait longer for a release of 
some functionality, or re-prioritize 
which features should be completed 
more immediately. 

"But this requires the customer to be 
accountable," Ambler said. "It's a more 
disciplined approached, but the business 
can't push off [responsibility and blame] 
to IT." 

In a typical waterfall development 
scenario, the feature set is fixed while 
the variables come in the schedule and 
cost. Under agile development, the time 
and budget are fixed, and the features 
are the variables, according to Mike 
Jones, vice president of worldwide mar- 
keting for agile platform developer Out- 
Systems. 

"You've got to embrace the notion of 
change as you go," he said. "You have to 
trust that the software will be delivered 
on time, in budget and with enough func- 
tionality to make the business happy." 

Emergn's Adamopoulos added, "The 
dialog changes from time and delivery to 
business value." 

With a waterfall practice, once the 
project is scoped and funded, the 
requirements go into lockdown. Changes 
by definition will result in a different 
scope and increased cost. With agile pro- 
continued on page 36 ► 
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Pitfalls still linger around agile 



< continued from page 35 

ject planning, you say you'll create a cer- 
tain amount of functionality in a certain 
amount of time, with the understanding 
that if business requirements change, 
they can be accommodated. 

"We will have delivered the same 
number of stories as originally 
promised, but the features probably 
changed" somewhere along the way, 
Jones explained. 

CHANGING CULTURE 

Agile development changes many things 
about development. It changes the way 
organizations plan and run their soft- 
ware projects, and it changes the way 
people think about requirements, cod- 
ing and testing. 

Very often, organizations moving to 
agile processes run into hot water with 
the project managers, according to Col- 
labNet's Clarke. Project managers, he 
said, want hard schedules. They want to 
know what they're going to get, when, 
and for how much. 

"That flies in the face of some of 
agile's basic tenets: being nimble, hear- 
ing from customers, adapting to change. 
It takes a mental shift, or it's hard to get 
out of the starting gate," he said. 

Clarke described the "scrum of 



MINIMUM MARKET FEATURE SET 



Because of agile's ability to react to changes in reguirements, there is a tendency 
among development teams using these practices to want to come to market with 
fully loaded software. 

The way to combat this is through the use of a minimum market feature set, 
according to Alex Adamopoulos, founder and CEO of agile consultancy Emergn. The 
feature set, he explained, defines the minimum reguired to satisfy the immediate 
need for the project you're building. 

"The car industry is a good example of this," Adamopoulos said. "Every car they 
sell comes in a base model. You want more features? They can be added on." 

The minimum market feature set can also help organizations define their busi- 
ness value, and eliminate waste by not expending time and money to create some- 
thing that is outside the scope of the project. To do this, an organization must make 
sure the work mapped out meets the objectives of the client and not its own inter- 
nal IT department. 

"You need to bring a repeatable, standardized approach to feasibility and busi- 
ness impact," Adamopoulos said. "And it must be carried all the way through how 
software is delivered." —David Rubinstein 



scrums" concept, which separates soft- 
ware projects into agile pods. "It's about 
coming up with new ways to organize 
work to find clean separation of parts." 
Each team holds it own scrum meeting, 
then sends a representative to the larger 
"scrum of scrums" meeting where the 
overall project is held together. 

This approach pushes more responsi- 
bility onto the developers on these small 
teams, as each group must have the 



strength to do innovative, creative, 
scaleable software. "Development," 
Clarke declared, "is back in fashion." 

While agile might be a boon to devel- 
opers, Clarke said agile has given classic 
ALM roles an identity crisis. 

The role of requirements manage- 
ment is being shaken up, he said. In a 
waterfall scenario, a squad of business 
analysts would build a big road map for 
the project, and the requirements would 



go through a lengthy vetting process 
before arriving at a developer's doorstep 
as a complete set of requirements. 

With agile, "developers are working 
closely with the user and the scrum mas- 
ter. There's a direct connect, because 
that's where the marching orders are 
coming from," said Clarke. 

Project managers who can be more 
technical will find themselves extremely 
valuable, he said. "There is still a role for 
people who can take a step back, listen 
to customers and keep the big picture in 
sight. But the days of armies of guys tak- 
ing a third of the time of the project 
compiling requirements are gone." 

QA is another area impacted by agile. 
"If software is always to be shippable, at 
the end of an iteration, everything is 
already tested, qualified and ready to 
go," Clarke said. "What does that mean 
to the QA qualification period? Devel- 
opers are using unit test and [continuous 
integration] to do a lot of what QA used 
to do. Pure agilists freak guys out with 
their always-shippable notions." 

With each new development para- 
digm, roles and responsibilities shift. 
Clarke said with agile, he feels "the nee- 
dle is coming back to center. Rhythms 
will stabilize and people will find a new 
way to work together." I 
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Governance a key to successful agile 

It's about enablement, not command and control, IBM's Ambler says 



BY DAVID RUBINSTEIN 

Forty-four percent of software devel- 
opment projects use some kind of agile 
techniques, according to Scott Ambler, 
IBM's practice leader for agile devel- 
opment. That's occurring in organiza- 
tions where development is distrib- 
uted, in regulatory environments, and 
in places using CMMI to measure the 
effectiveness of their development 
processes. 

But as these organizations scale, 
Ambler said, they're finding that the 
mainstream rhetoric of agile develop- 
ment doesn't hold. 

To address this problem, IBM is pub- 
lishing a white paper called The Agile 
Scaling Model (ASM). One of its goals is 
to get organizations "out of the scrum 
rhetoric and to look at the whole life 
cycle, from pre-project, to get a full han- 
dle on the complexity of agile software 
delivery." 

The lowest rung of the ASM is what 
Ambler called "core agile," where the 
focus is on software construction. It is 
value-driven and delivers working soft- 
ware with every iteration. 

Beyond that is "disciplined agile," 
which expands on the Scrum concept of 



'Organizations have to recognize that 
one process doesn't fit all. ' 

—Scott Ambler, IBM agile program manager 





a value-driven life cycle. Software is 
delivered in a collaborative and self- 
organized manner, using an appropriate 
governance policy. 

It is important that agile teams orga- 
nize and govern themselves, conform- 
ing to an enterprise's architecture and 
leveraging it in their projects, Ambler 
said. "This is an adoption challenge" for 
agile, he expounded. Governance 
efforts that are not designed for agile 
work are dysfunctional and often ham- 
per or burden project teams. "It's about 
enablement, not command and con- 
trol," he said. 



Many organizations are using a mix of 
agile and more formal, heavy processes, 
and governance must be done in differ- 
ent ways, he said. "You get different arti- 
facts and metrics at different points in 
time, and a single governance policy for 
all will hurt each of the teams." 

The third rung of the ASM is the 
"risk- value life cycle," where risk is 
explicitly defined and mitigated up 
front. It is here where stakeholders 
define the project's scope and what 
they mean by value, and where the 
architecture is proven out by building a 
skeleton of the system, reducing tech- 



nical risk, Ambler said. According to a 
November blog post, "Disciplined 
Agile Delivery," these steps also help 
with transitioning to agile, allowing tra- 
ditional funding models to use these 
milestones before moving to the finer- 
grained iteration-based funding that 
agile allows. 

Finally, the top level of ASM is "agili- 
ty at scale." Ambler said there are eight 
complexity factors to agile development: 
geographical distribution, team size, 
compliance requirements, domain com- 
plexity, organization distribution, techni- 
cal complexity, organizational complexi- 
ty and enterprise discipline. 

Organizations "will work differently 
depending upon where they are in the 
spectrum" of agile development, Ambler 
said. "Organizations have to recognize 
that one process doesn't fit all." 

He advocated the adoption of lean 
manufacturing principles by software 
development organizations, because he 
said they provide guidance for scaling 
agile efforts. 

For more of Ambler's thoughts and 
ideas on agile, read his "Agile Mythbusters" 
at agilemontreal.ca/docs/agiletour2009/ 
AmblerAgileMythbusters.pdf. I 
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FROM THE EDITORS 

Embrace Enterprise 2.0 

Social networking is entering the workforce. Its our role to support 
that new technology and to encourage efforts to improve business 
productivity using social tools. 

However, we should tread cautiously. IT should not get too far ahead and 
launch grand initiatives that don't solve real business problems. We should 
also be careful not to impose too many controls on social computing: Cen- 
tralization will stifle innovation. Top-down approaches or imposing a hier- 
archical model will neutralize the benefits of Enterprise 2.0. 

Social networks are transforming the personal lives of many people in 
many parts of the world. Whether you're in the U.S., Japan, China or 
Europe, it's hard for many people between the ages of 15 and 65 to go even 
a few hours without checking their Facebook or Twitter account. So it's 
only natural that those technologies are finding their way into the office. 

If colleagues are also friends on Facebook, it seems natural to leverage 
that path as a more efficient vehicle for collaboration than corporate e-mail. 
After all, co-workers are already used to phoning or texting each other using 
personal cell phones instead of routing messages through the PBX. 

Our advice is to watch for skunkwork initiatives in social networking, 
but instead of crushing them, find ways to support them using secure, 
scalable channels. If different business units or project teams are exper- 
imenting with separate offerings, let all those trials go forward. Social 
networking tools — and use cases — are changing quickly, and today's 
super-popular solution may be tomorrow's dinosaur. 

Embrace the gardens of innovation within your company. Your end 
users are very likely smarter about these issues than anyone in the soft- 
ware development department; you can learn from them. 

Apache s decade of success 

The Apache Software Foundation is uniquely successful, and we applaud 
its first 10 years of delivering software that benefits not only the Apache 
community, but also the software industry and enterprise developers. 

When you compare Apache with other industry groups that started 
out to support the Java platform, like the Eclipse Foundation or the Java 
Community Process, you realize that they can't be compared. 

Apache represents a community of developers who work together to 
build software that solves specific problems. Tomcat provides an appli- 
cation container for Java servlets and JavaServer Pages. The HTTP Serv- 
er is, well, a simple HTTP server. Ant is a Java-based build tool. Hadoop 
provides infrastructure of scalable distributed computing. Geronimo is a 
Java EE 5 application server. 

Each of these has a fairly limited scope, and each project is designed to 
deliver immediately useful open-source software. There's no big agenda: 
just a problem, a solution, and a team of people who work to evolve that 
solution. 

Contrast that with, say, the Java Community Process. The JCP's job is to 
advance Java itself by creating specifications for new features, and a struc- 
ture for interoperability. While the JCP creates reference implementations 
of most Java Service Requests, there's no doubt that these are indeed ref- 
erence implementations, not finished products. It's left up to the JCP's 
members to create commercial-grade implementations of each JSR. 

You can also contrast Apache against the Eclipse Foundation. Eclipse 
is a vendor consortium where competitors get together to build common 
software. Those companies can then use Eclipse's software as is or build 
commercial products on top of it. 

Both the JCP and Eclipse Foundation are incredibly successful. Yet, 
because its only goal is to create great software — not to further anyone's 
business goals or push a specific agenda regarding Java or open-source 
software — the Apache Software Foundation occupies a unique place in 
the software development industry. 

Happy birthday, Apache, and thank you for a decade of outstanding 
success. I 



Developer DNA, DBA DNA 



A fictional conversation between 
Greg Nerpouni and David Intersi- 
mone, play-acting the roles of developer 
and database administrator, respectively. 
Do they speak the same language? 

• • • 

[11:08:41 AM] DBA says: I am on 
vacation in Hawaii this week and got an 
SMS last night at 2 a.m. that our produc- 
tion database in San 
Francisco was grinding 
to a halt. Can you tell 
me if any application 
patches were applied 
that I was unaware of? 

[11:12:47 AM] 
Developer says: No 
problem. The recent 
update of my code 
(build 2.1.24) is per- 
fect. I've unit, system 
and performance tested it on the devel- 
opment database server and the pre- 
production test database server, and all 
is well. I got a notice that operations 
performed the change update success- 
fully last week. And so far, everything 
seems okay! 

[11:14:59 AM] DBA says: But that 
doesn't explain the sudden drop in per- 
formance last night. Can you investigate? 

• • • 

[12:15:17 PM] Developer says: 
Okay. I grabbed a copy of the produc- 
tion database, ran some performance 
tests on my code, watched the execution 
profile, and I did find a performance hit 
in one of my reusable objects. I made 
the change, but there still seems to be 
some issues in the stored procedures 
that I use but didn't write. 

[12:17:31 PM] DBA says: My wife 
and kids are out snorkeling and looking 
for sea turtles, and Ym stuck under the 
umbrella with my laptop and Wi-Fi 
working on production issues — some 
vacation! Anyway, rerun your tests and 
take a profile of the database as well. We 
can get a sense of any SQL that might be 
causing bottlenecks on the DB. Once you 




have that, you can save it and send the 
snapshot to me and Til take a look. 
• • • 
[1:20:22 PM] Developer says: 

Thanks and sorry to interrupt your vaca- 
tion (wish I was snorkeling too). I start- 
ed the database profiler, ran my tests 
and captured a snapshot of what took 
place during the one hour of unit and 
stress testing. I've e- 
mailed the snapshot 
for you to look over. I 
did see some suspi- 
cious time periods, 
especially in my use of 
recursion in the SQL 
statement that counts 
the number of orders 
jk f jfl I by a customer for each 
employee in a store. 
There are also two 
stored procedures ("CalculateTaxTotal" 
and "GetManagers") that seem to take a 
long time to return results. 

[1:23:19 PM] DBA says: There are 
definitely some performance spikes 
occurring based on the profiling snap- 
shot you sent over. I think Terry should 
be around the office as my backup. He 
should be able to take the top three SQL 
statements contributing to the biggest 
spike from the snapshot and throw them 
into the SQL tuner to see if they can be 
sped up at all. Can you track Terry down 
or would you like me to? I am about to 
hit the beach bar for a frosty beverage — 
it's a hot day here in Hawaii! 

[1:25:31 PM] Developer says: 
Unfortunately, I can't track Terry down 
as I am just leaving for a business trip to 
Asia for the next two weeks. I can con- 
tinue looking at the code side. I did fix 
two more code issues dealing with the 
way I was using multiple threads to exe- 
cute long-running queries so that my 
GUI application could stay responsive 
to user input. The fixes allow the user 
to start additional reports for customers 
and orders while the queries run in the 
background threads. 



Economic downturn has 



DATA WATCH 



minimal effect on cloud computing 



The economic downturn hasn't 
prevented organizations from 
adopting cloud computing, 
according to survey figures from 
Avanade, a business technology 
services provider for Microsoft 
technologies. More than 500 
executives were surveyed about 
their company's approach to 
cloud computing in recent 
months, according to Avanade. 



More than 70% of companies report 
that the economic downturn has either: 

helped their 

efforts to 

_ implement 
The rest \ doud 

re P° rtno _„_ /computing 

plans to 

adopt cloud 

computing 

or had no effect on implementing 
cloud computing. 
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[1:28:59 PM] DBA says: Ah, okay. 
Those fixes should he useful. I will for- 
ward the database profile snapshot over to 
Terry and ask him to turn the tuner on the 
top SQL to see if they can he sped up. You 
should have some new SQL to test out 
once you land in Asia. Have a safe trip! 

[1:30:01 PM] Developer says: 
Thanks, can't wait to see the SQL 
results. I would do the tuning myself, 
but Terry is the god of tuning SQL state- 
ments to take advantage of optimizations 
and SQL extensions in the database 
engine. I will take a look at my code and 
see if I can find any other improvements 
now that I have landed in Delhi. 

• • • 

[2:31:55 PM] DBA says: Okay. 
Terry managed to speed up the top 
three offending SQL statements. He 
sent them to you via e-mail, and you 
should be able to test with them now. 
Are you able to stress test the code 
while on the road, or would you like 
Terry to point these at a particular 
database and simulate a load to see how 
they measure up? We can show the dif- 
ference between the old and new SQL 
performance side-by-side in a single 
profile to help prove it if you like. I 
know the code review may require 
something like that. I am just stepping 
away for a zipline adventure on Maui, 
but will check in again later] 

• • • 

[4:34:20 PM (next day)] Developer 
says: I used VPN to connect to our test 
virtual machine. It made it easy to test 
from here in India with all the execution 
happening in the IT center back there. I 
ran both unit tests and stress tests, and I 
can see the improvements. While I was 
waiting for Terry to get back to you, I 
looked at my code and really can't find 
anything else (for now) to modify without 
possibly breaking the deployed systems. 
All of my previous changes and Terry's 
SQL statements are now checked into the 
version control system. The continuous 
build process e-mailed me a list of the 
successful builds. They are waiting on the 
pre-production deployment server for IT 
ops to grab when they OK the changes. 

I've put together a performance/fix 
report and sent it to everyone with my 
recommendation that the update is ready 
for production. If you concur, we just 
need to wait for IT to take the application 
build and the database update scripts. In 
the meantime, I am looking through the 
user stories in the Scrum backlog for the 
next development sprint that is scheduled 
for when I get back. Let's hope IT is hap- 
py so we can get on to new feature work. 

[4:35:08 PM] DBA says: Awesome! 
I am going back to my vacation and will 
hope this all goes swimmingly (pun 
intended) 

— Cheers, David I! 

David Intersimone is vice president of 
developer relations, and Greg Nerpouni 
is a senior product manager, at Embar- 
cadero Technologies. 



LETTERS TO THE EDITOR 

Repeating software failures 



It seems that every time I read an article 
("Imagination, process failures doom 
software projects," Nov. 1, p. 5) on soft- 
ware project failure, the writers 
attribute such failures to just about the 
same issues they have been arguing over 
for the past 30+ years. 

As a senior software engineer for 35 
years, I have seen these very same argu- 
ments cause countless project failures. 
Surprisingly, the rate of failure has hov- 
ered around the 70% mark for the same 
length of time. However, the problems 
and issues analysts write about are mere- 
ly symptoms of much deeper problems 
in the field of software development. 

Where the majority of problems stem 
are from the underlying sociological basis 
for software development as whole. At 
the top-most level, you have a host of bad 
management who barely understands 
both the technical and human dynamics 
that go into making quality software. 
Most managers who believe they know a 
lot about such development are often 
extremely poor about understanding the 
necessities of the process from an overall 
process. Most technical managers, espe- 
cially in the realm of business applica- 
tions, are nothing more than political 
hacks who are there to push projects 
through for the purposes of deadlines 
they have too often readily agreed to, 
leaving quality as something you push on 
the developers after the fact. 

The next issue is the vendors them- 
selves. Like most technical managers, 
they want to push software out the door to 
beat competition instead of deadlines. 
The software is then full of bugs, leaving 
developers to develop workarounds at 
crucial points in their projects. 

Then of course you have the avalanche 
of software that vendors keep on produc- 
ing, with new versions having newer tech- 
nologies and methodologies included in 
every new release, making it impossible 
for the software development community 
to develop a solid knowledge base where- 
by the issues and problems have ready 
answers. The last time such a knowledge 
base existed was with Windows 3.1. 

Finally, you have the massive ongoing 
dislocation that is constantly occurring in 
the software development community. 
With the rush to save costs under the 
guise of increased competition, compa- 
nies are abandoning any sense of commit- 
ment to the actual developer community, 
leaving them in states of insecurity. This in 
turn leads developers to concentrate on 
understanding technology for interviews 
and not good project development. 

Of course, you have the competitive 
spirit among software developers who are 
always trying to work with the latest and 
greatest technologies, but this again is a 
factor of the state of flux in the field that 
has jettisoned quality as a keystone to pro- 



fessional development for random knowl- 
edge. These are generalities, but they out- 
line the underlying factors for why soft- 
ware failure is a constant in the IT field. 

After 30+ years of the same issues with 
the same reasons for them, you would 
think that businesses would finally allow 
for some positive change in the software 
arena. However, this will never happen, 
since business leaders tend to be very 
short-sighted and have very narrow prior- 
ities that always make up the realms that 
they make decisions within. Running off 
to India, China and other such countries 
may have resolved some of the more 
short-term issues such as costs. However, 
in the long run, such policies and endeav- 
ors have created havoc in the industry that 
it cannot readily extricate itself from. 

The result will be merely more project 
failure and more articles like this one... 

Steve Naidamast 

Black Falcon Software 

SLOW DOWN ON SCALA 

Scala is a very nice addition to the JVM 
language toolkit, but some of your facts 
are way off the mark. 

Both JRuby and Jython represent 
non-Java JVM languages and have vastly 
more TIOBE-share than Scala. Ruby 
alone represents more users worldwide 
(albeit not necessarily on the JVM) than 
Scala, Clojure and Groovy combined. 

The performance of Scala is certainly 
solid, but it's not as fast as Java. It may 
sometimes allow more elegant (and per- 
haps more efficient) representations of 
certain algorithms, but it can't do any- 
thing Java can't do (and it can't do many 
things Java can do). 

Your comparison ("Scala Sings," Nov. 
1, p. 41) with "Java 6 client" is also incor- 
rect, since Scala running on the client 
VM would degrade just as much as Java 
does. Actors are a good way to do con- 
currency, but Scala has only "included 
them in the language" by having them 
available as part of Scala's runtime 
libraries and by having a syntax for asyn- 
chronous message dispatches. The same 
could be done to any of the other lan- 
guages with almost no effort... but the 
other languages are actually in better 
shape, since you can use whatever actor 
framework suits you rather than the one 
set up by the language authors. 

Excitement about Scala is not mis- 
placed, but breathless assertions about 
its performance, adoption and potential 
should be tempered with a dose of facts. 

Charles Oliver Nutter 

Sun Microsystems 

SD Times welcomes feedback. Letters should 
include name, company affiliation and contact 
information. Letters become the property of 
BZ Media and may be edited for space and style. 
Send your thoughts to feedback@bzmedia.com. 
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A wide view of Vista for developers 



While the joke about Microsoft is that 
it takes them three tries to get some- 
thing right, with operating systems it 
seems that it's the service packs that lock 
things down. Windows 3.1 was vastly bet- 
ter than Windows 3.0, it was the Service 
Packs that delivered on XP s promise, and 
Windows 7 is an excellent improvement 
on Vista. What's that? You say that Win- 
dows 7 isn't a service pack and a rebrand- 
ing, but a major release? Yeah, okay. 

It may be petty to start off with this, 
but I have to say that the first thing that 
struck when studying the new Windows 
7 APIs is that they are C-based. 
Microsoft premiered .NET and the 
CLR almost a decade ago. In 2003, they 
swore up and down that the future of all 
development, including for rich client 
applications, was managed code. 

We all know that the ambitions of 
"Longhorn" had to be "reset" in order 
for Vista to ever ship, but Microsoft nev- 
er did a similar reset on developer guid- 
ance. They never said, "Hey, you know 
what? You ought to hold on to that copy 
of Rector's 'Win32 Programming,' and 
you might want to keep some space on 
your shelf for some C++ books." 

The failure of the "smart client" 
development model relative to browser- 
based and "rich Internet" applications is 



caused by far more than hiccups in 
accessing new OS -level APIs, but by this 
point, the assumption should be man- 
aged, not native. Instead, the API Code 
Pack provides .NET developers "a 
source code library that can be used to 
access some new Windows 7 features." 

The flashiest capability in Windows 7 
is multi-touch, but its actual 
practicality is minimal with 
today's computers. I was a big 
fan of the Tablet PC, whose 
APIs actually supported multi- 
ple styluses (although such dri- 
vers never surfaced). I've 
owned three Tablet PCs and 
learned the hard way that the 
market for touch-based cus- 
tom development is tiny — at 
least until Office supports 
touch in a serious manner. (Given the 
revenues from Office, it may be too much 
to say that Office is the tail that wags the 
Windows dog, but Office's requirements 
and UI choices trump all others.) 

Speaking of Office, the now-familiar 
Ribbon from Office has migrated to the 
OS. I am among those who don't at all 
care for the Ribbon and have spent an 
inordinate amount of time trying to keep 
myself from having to deal with it, so it is 
hard for me to enthuse about "More Rib- 
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bon, More Often." For those who are 
more enthusiastic about consuming large 
amounts of pixels to present their users 
with confusing combinations of graphics 
and text, though, welcome to the fun! 

The UI improvements that I'm most 
enthusiastic about are changes to the 
Taskbar that bring it to parity with, and 
arguably leapfrog, Mac OS X's 
Dock. The majority of 
Taskbar improvements (dock- 
ing, thumbnails with "Arrow 
Peek," rearrangement) come 
for free with the OS, but one 
can provide value and UI 
sweetness by customizing 
such things as the taskbar icon 
and preview thumbnail, give 
quick feedback by imple- 
menting a progress bar for a 
long-running task, and one can directly 
add easily-accessed functionality by writ- 
ing custom and tabbed thumbnails, or by 
creating "jump lists," which are essential- 
ly context menus for items in the taskbar. 
The other major APIs don't have cus- 
tomizable UIs but provide a lot of value 
for developers. "Shell Libraries" replace 
the "My..." hierarchy of known folders 
("My Documents," "My Pictures," etc.) 
with a more general concept of a folder 
that is a virtual view of files physically 
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stored in different locations. It may not be 
WinFS, but it's a good start and probably 
of interest to application developers. 

More specialized, but very welcome, 
is a new "Sensor and Location" platform 
that provides a consistent API for inter- 
acting with physical sensors and pro- 
vides location services for the most-like- 
ly physical sensor: a GPS. 

One of the things that have come out 
of the mobile development world is that 
sensing the environment is an excellent 
way to unlock value. Accelerometer- 
sensing has changed the gaming world, 
but there's great value in taking cues 
from the environment (light and sound 
levels, temperatures, maybe even air 
quality) and responding appropriately. 

The Windows 7 Service Control Man- 
ager now supports starting a service in 
reaction to system event triggers. Taking 
advantage of the ability to start and stop 
services could mean significant power sav- 
ings, which is a topic of increasing inter- 
est, both in mobile and server situations. 

Finally, I have to mention that Win- 
dows 7 ships with Power Shell 2. Hope- 
fully, this excellent shell and scripting 
language will finally gain the following it 
deserves. It may not be a developer fea- 
ture, but it's a feature that developers 
will love. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 



Lost in the divide: Agile architecture 



The agile movement, as most readers 
know, was founded in response to 
the perceived need for an approach to 
software development that could easily 
accommodate change. It was designed 
in opposition to the so-called waterfall 
model, which favored an extensive 
design cycle that imposed fairly 
unchanging requirements and designs. 
It often delivered products to customers 
that were out of sync with the users' 
needs due to the evolution of those 
needs during the development period. 

At its inception, the movement was 
not about techniques, but about princi- 
ples. However, extreme programming 
(XP) was one of the most established 
agile practices of the time, and for many 
years XP practices and agile approaches 
shared a great deal of overlap. In fact, it 
would be fair to say that XP provided the 
body of practices with which agile could 
come into being. XP and agile would lat- 
er on become more distinct, but early on 
they were essentially congruent. 

XP, as the P implies, is focused on low- 
level work. There are 12 core practices in 
XP. Seven of them are exclusively about 
coding-related work: pair programming, 
test-driven development (TDD), refac- 
toring, small releases, coding standards, 
collective code ownership, and system 
metaphors. The remaining five barely 



hover over this low level: planning game 
(weekly iteration planning), whole team, 
continuous integration (building the code 
repeatedly), simple design (use Occam's 
razor, where possible), and sustainable 
pace. This makes XP a great solution if 
only your coding/implementation 
pipeline is faulty. But experience tells me 
that often sites with faulty processes suf- 
fer from problems far further 
up the pipeline than what can 
be addressed by TDD or CI. 

For these problems, you 
need to go to a different 
branch of agility: the one that 
focuses on process, design 
and team interaction. This 
higher branch is character- 
ized by lean development, 
kanban and to some extent 
Scrum. (Scrum is sort of a 
wobbler; it can be viewed as high-level 
or low-level, but lean is a genuine sys- 
tematic attempt to bring agility to the 
larger process flows where development 
teams first become bollixed up.) 

Lean development derives from a 
just-in-time manufacturing approach 
used at Toyota. It was adapted to soft- 
ware development and described in the 
classic "Lean Software Development" 
by Mary and Tom Poppendieck. It relies 
on seven precepts, not one of which 
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deals directly with code, although being 
true guiding principles, they can be 
applied to coding. 

While this higher level is undeniably 
agile, the term agile increasingly refers to 
a set of coding practices that are low-level 
and stay down at the bits and bytes. The 
best summary of them, by far, is Robert 
"Uncle Bob" Martin's "Agile Software 
Development," which came 
out in 2002. To speak of, every 
agile book that has appeared 
since then has simply expand- 
ed on what Martin put into this 
work. It's that comprehensive. 
The book perfectly illus- 
trates the "in the small" aspect 
of agile. While the subtitle 
states "Principles, Patterns, 
and Practices," it is mostly 
filled with diagrams and code. 
The Poppendiecks' book (whose name 
differs by one word), in contrast, does 
not contain a single line of code. 

The problem caused by this split is 
that the issues agile has been neglecting 
are not being addressed by the coder 
community due to its own low-level 
focus, nor by the process gurus due to 
their high-level focus. I am talking about 
a level that should ride between lean and 
agile coding: architecture and design. 
Agile design: Those are two words you 



rarely see together. Why is that? 

Here is another rarely heard pair: agile 
architecture. Of the 27 presentations at 
the just-completed Agile Vancouver con- 
clave, not a single one contained the word 
architecture in its title. Yet, as Mary Pop- 
pendieck avers, "[project] architecture 
must support incremental development." 

How is this architecture developed? 
Gosh knows. The Poppendieck book has 
no entry for architecture in its index. 
And Martin's 500-page work has a short 
10-page section in an Appendix, most of 
it dedicated to explaining UML nota- 
tion. Clearly, architecture is a glaring 
omission of the agile approach. 

Many enterprises don't buy into the 
whole agile message. Despite my high 
esteem for agility, this esteem comes 
with a certain prudence. Agile has gaps. 
Agile does not understand architecture 
and minimally understands design — two 
practices crucial to enterprises. More- 
over, there is no substantial track record 
of agile methods of any kind working 
well with large teams. 

Because of these gaps, enterprises 
are better off weaving agile with other 
familiar methodologies and finding a 
blend that works for them rather than 
upending their processes to adopt an 
approach that, while commendably good 
at many tasks, still has holes to fill. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Disenfranchising the disconnected 



Jl lAfelcome to Toronto!" said the 
WW cheerful flight attendant. "Voice 
rate is US$.79/min ; data is $15.36/MB. 
Unlimited domestic plans do NOT 
apply," said the happy text message from 
AT&T Wireless. 

Not wanting to purchase a 
100MB data plan for over a 
hundred dollars, and being 
unwilling to pay $15 per 
megabyte without a plan, I 
decided to try spending a 
week using my smartphone as 
a dumb phone. No e-mail. No 
live maps. No Facebook, no 
Twitter. No calendar sync, no 
streaming radio, no World Series scores, 
no restaurant locator — except when I 
could find a free WiFi hot spot. 

That's not to say that my iPhone 3G 
became truly stupid when offline. It 
still could act as a phone (albeit at $.79 
per minute), and I could text (cost 
unknown). Plus, of course, there was no 
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limitation on running local-only appli- 
cations, like listening to stored music or 
using the calendar app with pre-synced 
(and increasingly out-of-date) data. 
There was a human toll to this expe- 
rience. Withdrawal from the 
constant pinging (or buzzing) 
signaling the arrival of new mail 
was painful. So, too, was the 
inability to use Google Maps to 
find my location at any time. 
Looking for free WiFi hot spots 
became a real drag. 

For many of us in the tech- 
nology trade, it's far, far too easy 
to believe that everyone is like 
us: always connected, always on, all the 
time. We read stories and tell anecdotes 
about the mobile Internet. A week with- 
out a smartphone taught me that it's less 
ubiquitous than we think. 

Many people, including employees of 
our company, our business partners and 
our customers, are not connected 24x7. 



Not everyone has a smartphone. Not 
everyone who has a smartphone has 
access to an "all-you-can-eat" broadband 
plan. Data transmission isn't free, and 
it's not everywhere. 

What can you do? First, if you're an 
iPhone, BlackBerry, Android or Treo 
user, wipe that smug look off your face. 
Sure, you're in broadband heaven today, 
but wait until you're someplace without 
a clear signal, or someplace that's not 
covered by your standard data plan. 

Second, when you build applications 
or set up mobile application access to 
your data, don't waste bits. Provide 
options for low-bandwidth connections 
and for expensive bandwidth. When 
you're paying $15 per megabyte, every 
bit counts. I 

Alan Zeichick is editorial director of 
SD Times. Follow him on Twitter at 
twitter coml zeichick. Read his blog at 
ztrek. blogspot. com. 
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TURNS OUT IDAHO isn't just full of 
potatoes. 

The rural state leads all 50 United 
States in the amount of e-mail spam 
received there, with 93.8% of e-mail 
sent to Idaho considered spam, accord- 
ing to statistics released by security 
services company MessageLabs. 
The company's executives attrib- 
■ uted this high level of spam to 
• — jr the economic downturn 
and a rise in botnets. 
The other highest- 
i spammed states, in 
.. order, are Kentucky, 
New Jersey, Alabama, Illinois and Indi- 
ana. Montana, meanwhile, was named as 
the least spammed state. 

— Jeff Feinman 

THE INITIAL REPORTS about Win 
dows 7 are encouraging. Surveys are 
indicating that it is drawing swells of 
Windows Vista users to upgrade, and 
I'm not hearing any disaster stories. 

Windows XP users, meanwhile, are 
staying put. That could be because 
Microsoft has no upgrade path from 
Windows XP to Windows 7, or their 
hardware might be too wimpy to run it. 
In doing so, Microsoft also saved itself — 
and users — from upgrades gone badly. 

It was wise of Microsoft to make the 
cutoff at Windows Vista: Bad word of 
mouth could have sunk Windows 7. 
Windows Vista gave many users a bad 
impression that, unfortunately for 
Microsoft, did not go away. 

— David Worthington 



I'D WAGER YOUR COMPANY'S cus- 
tomer base is quite diverse. Whether 
you're selling golf clubs or patent litiga- 
tion, the folks who come to your corpo- 
rate website likely come from a wide 
cross-section of the human experience. 

One segment that often is over- 
looked is the transgender community. I 
attended a talk at the San Francisco 
hacker collective Noisebridge in Octo- 
ber, where the speaker said there were 
more than 900 possible types of gender 
with which a person could identify. 
As such, the speaker suggested that 
Web registration processes offer more 
selections when asking users for their 



gender. It could be as simple (and some 
would say, degrading) as an "other," 
option, or you could list a dozen or so 
sexuality/gender options. 

It's not exactly a best practice, or even 
something that will likely accommodate 
_h, — ^ more than 1% of your cus- 
V"^ |\ tomers, but when a transgen- 
^ TbM der user does sign up for 
^^J something on your site and 
immediately notices the less myopic view 
of gender held by your company, you will 
likely win over a customer for life. It's a 
small thing, but when you spend your life 
feeling like you don't belong anywhere, 
something as simple as a Web form can 
make you feel a whole lot more comfort- 
able in your own skin. 

— Alex Handy 



Events Calendar 



Lotusphere 

Orlando 
IBM 

www.ibm.com/lotus/lotusphere 



Jan. 17-21 



Macworld 2010 


Feb. 9-13 


San Francisco 




IDG WORLD EXPO 




www.macworldexpo.com 




SPTechCon 2010 


Feb. 10-12 


San Francisco 




BZ MEDIA 




www.sptechcon.com 




PyCon 2010 (Python Conf.)Feb. 17-25 


Atlanta 




PYTHON SOFTWARE FOUNDATION 




us.pycon.org 




Enterprise Software 


March 1-3 


Development Conf. 




San Mateo, Calif. 




BZ MEDIA 




www.go-esdc.com 




RSA Conf. 


March 1-5 


San Francisco 




RSA CONFERENCES 




www.rsaconference.com 




Game Developers Conf. 


March 9-12 


San Francisco 




THINK SERVICES 




www.gdconf.com 




SHARE 


March 14-18 


Seattle 




SHARE 




www.share.org 




Microsoft MIX10 


March 15-17 


Las Vegas 




MICROSOFT 




www.microsoft.com/events/mix 




TheServerSide 


March 17-19 


Java Symposium 




Las Vegas 




TECHTARGET 




javasymposium.techtarget.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Adobe Systems is expected to cut 680 full-time jobs in order to 
adequately meet its fiscal 2010 budget. The cuts represent approx- 
imately 9% of the company's workforce. This round of cuts comes 
almost a year after Adobe laid off 600 people due to the econom- 
ic downturn . . . Google has signed a definitive agreement to 
acquire AdMob, a mobile ad technology provider, for US$750 mil- 
lion. Company executives said the acquisition will improve Google's 
existing mobile technologies, and that it will help developers mon- 
etize its mobile content more effectively . . . Enterprise social col- 
laboration software startup CubeTree has secured US$8 million in 
Series B financing, led by InterWest Partners. Existing investor 
Trinity Ventures also contributed to the round of funds. To date, 
CubeTree has raised nearly $12 million in funding, according to the 
company. CubeTree provides a hosted social networking platform 
with enterprise collaboration and project management tools like 
wikis, blogs and file sharing. 

EARNINGS: Quest Software reported total revenues of US$170.8 
million for the third quarter of 2009. That revenue total was an 
8.9% decrease compared to the prior year's third-quarter revenue 



of $187.6 million. Total revenues for the first nine months of 2009 
were $500.7 million, a 6.2% decrease compared to $533.8 million 
for the same period in 2008. Net income for the third quarter of 
2009 was $2.9 million, compared to $17.3 million on a year-over- 
year basis . . . Business intelligence and data analytics company 
Teradata reported revenue of US$425 million for the third quarter 
of 2009, a 3% decrease from $439 million in the third quarter of 
2008. Net income was $63 million, compared to net income of $60 
million in the same quarter a year before. Third-quarter operating 
income was $88 million, slightly up from $86 million reported in 
the third quarter of 2008 . . . Cloud computing management soft- 
ware company NetSuite announced that total revenue for the third 
quarter of 2009 was US$41.7 million, compared to $40.3 million in 
the second quarter of this year. Revenue from the Americas for the 
third quarter was $34.7 million, while revenue from international 
regions was $7 million. Net loss for the third quarter of 2009 was 
$8 million, as compared to a net loss of $6.2 million for the third 
quarter of 2008. Non-GAAP net income for the third quarter of 
2009 was $348,000, compared to a non-GAAP net loss of $1.7 mil- 
lion on a year-over-year basis. I 
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